Kaspersky Lab researchers have detected a new wave of financial spear-phishing emails disguised as legitimate procurement and accounting letters that hit at least 400 industrial organizations in an attempt to earn money for the cybercriminals.

 

The series of attacks started back in autumn 2017 and targeted several hundreds of company PCs in industries ranging from oil and gas, to metallurgy, energy, construction, and logistics.

 

In the detected wave, the criminals not only attacked industrial companies together with other organizations, they were predominantly focused on them. They sent out emails containing malicious attachments and try to lure unsuspecting victims into giving away confidential data, which they could then use to make money.

 

According to Kaspersky Lab data, this wave of emails targeted around 800 employee PCs, with the goal of stealing money and confidential data from the organizations, which can then be used in new attacks.

 

The emails were disguised as legitimate procurement and accounting letters, containing content that corresponded to the profile of the attacked organizations and took into account the identity of the employee – the recipient of the letter.

 

It is noteworthy that the attackers even addressed the targeted victims by name. This suggests that the attacks were carefully prepared and that criminals took the time to develop an individual letter for each user.

 

When the recipient clicked on the malicious attachments, modified legitimate software was discreetly installed on the computer so that criminals could connect to it, examine documents and software related to the procurement, financial and accounting operations.

 

Furthermore, the attackers were looking for different ways to commit financial fraud, such as changing requisites in payment bills in order to withdraw money for their benefit.

 

Moreover, whenever criminals needed additional data or capabilities, such as obtaining local administrator rights or stealing user authentication data and Windows accounts to spread within the enterprise network, the attackers uploaded additional sets of malware, prepared individually for an attack on each victim.

 

This included spyware, additional remote administration tools that extend the control of attackers on infected systems and malware to exploit vulnerabilities in the operating system, as well as the Mimikatz tool that allows users to obtain data from Windows accounts.

 

“The attackers demonstrated a clear interest in targeting industrial companies. Based on our experiences, this is likely to be due to the fact that their level of cybersecurity awareness is not as high as it is in other markets such as financial services. That makes industrial companies a lucrative target for cybercriminals,” said Vyacheslav Kopeytsev, security expert at Kaspersky Lab.

 

Kaspersky Lab researchers advise users to follow these key measures in order to be protected against spear-phishing attacks:

  • use security solutions with dedicated functionality aimed at detecting and blocking phishing attempts. Businesses can protect their on-premise email systems with targeted applications inside the Kaspersky Endpoint Security for Business suite. Kaspersky Security for Microsoft Office 365 helps to protect the cloud-based mail service Exchange Online inside the Microsoft Office 365 suite.
  • introduce security awareness initiatives, including gamified training with skills assessments and reinforcement through the repetition of simulated phishing attacks. Kaspersky Lab customers would benefit from using the Kaspersky Security Awareness Training services.

 

To learn more about the financial phishing threat, please read the blog post available at ICS-CERT.kaspersky.com.

 


RECOMMENDED ARTICLE FOR TECHWORLD


 
10 Tip to Improve Your Internet Privacy
Techworld Date Posted: 31 July 2018 5:09 PM | 483 Views
Massive data breaches, marketers tracking your every step online, shady people exploring the photos you shared in social networks — the list of digital annoyances goes on and on. However, it’s not completely hopeless:.... See More
 
10 Tip to Improve Your Internet Privacy
Techworld Date Posted: 5:09 PM | 483 Views
Massive data breaches, marketers tracking your every step online, shady people exploring the photos you shared in social networks — the list of digital annoyances goes on and on. However, it’s not completely hopeless:...See More

 
CORSAIR Launches New PSU, Coolers and Case at CES 2018
Techworld Date Posted: 9 January 2018 1:50 PM | 338 Views
CORSAIR®, a world leader in enthusiast memory, high-performance gaming hardware and PC components, today launched a range of PC enthusiast products, equipped with a host of new innovations and features to help PC builders.... See More
 
CORSAIR Launches New PSU, Coolers and Case at CES 2018
Techworld Date Posted: 1:50 PM | 338 Views
CORSAIR®, a world leader in enthusiast memory, high-performance gaming hardware and PC components, today launched a range of PC enthusiast products, equipped with a host of new innovations and features to help PC builders...See More

 
Asia and Middle East a Hotbed of New Threat Actors in Q1, 2018
Techworld Date Posted: 16 April 2018 4:28 PM | 469 Views
During the first three months of the year, Kaspersky Lab researchers discovered a wave of new APT activity based mainly in Asia – more than 30% of Q1 reports were dedicated to threat operations.... See More
 
Asia and Middle East a Hotbed of New Threat Actors in Q1, 2018
Techworld Date Posted: 4:28 PM | 469 Views
During the first three months of the year, Kaspersky Lab researchers discovered a wave of new APT activity based mainly in Asia – more than 30% of Q1 reports were dedicated to threat operations...See More

 
Lax Security Leaves Car Sharing Apps Vulnerable to Attack
Techworld Date Posted: 2 August 2018 1:33 PM | 538 Views
Kaspersky Lab researchers have examined the security of 13 car sharing applications from household manufacturers across the globe – including those from Russia, the US, and Europe.. See More
 
Lax Security Leaves Car Sharing Apps Vulnerable to Attack
Techworld Date Posted: 1:33 PM | 538 Views
Kaspersky Lab researchers have examined the security of 13 car sharing applications from household manufacturers across the globe – including those from Russia, the US, and Europe.See More

 
Kaspersky Lab Deploys Industrial CyberSecurity Solutions, Leverages on iTrust Test Bed
Techworld Date Posted: 22 January 2018 3:13 PM | 244 Views
Kaspersky Lab recently announced the deployment of Kaspersky’s Industrial CyberSecurity (KICS) solutions at the Secure Water Treatment (SWaT) test bed of iTrust, a centre for cyber security research of the Singapore University of Technology.... See More
 
Kaspersky Lab Deploys Industrial CyberSecurity Solutions, Leverages on iTrust Test Bed
Techworld Date Posted: 3:13 PM | 244 Views
Kaspersky Lab recently announced the deployment of Kaspersky’s Industrial CyberSecurity (KICS) solutions at the Secure Water Treatment (SWaT) test bed of iTrust, a centre for cyber security research of the Singapore University of Technology...See More

 
Realme C1: King of Entry Level Smartphones Is Now Ready for Its First Flash Sale on December 5th 12NN
Techworld Date Posted: 4 December 2018 5:07 PM | 138 Views
Realme Philippines, the newest game changer smartphone brand in the Philippines recently unveiled its first smartphone in the country, the Realme C1.. See More
 
Realme C1: King of Entry Level Smartphones Is Now Ready for Its First Flash Sale on December 5th 12NN
Techworld Date Posted: 5:07 PM | 138 Views
Realme Philippines, the newest game changer smartphone brand in the Philippines recently unveiled its first smartphone in the country, the Realme C1.See More

 
Juniper Networks Strengthens Country Presence, Appoints MSI-ECS as Country Distributor
Techworld Date Posted: 2 May 2018 3:52 PM | 404 Views
MSI-ECS has been appointed as Philippines’ distributor for Juniper Networks, across Juniper’s full range of high-performance networking, security, data center and cloud solutions. MSI-ECS, one of the country’s largest ICT distributors, will support Juniper’s.... See More
 
Juniper Networks Strengthens Country Presence, Appoints MSI-ECS as Country Distributor
Techworld Date Posted: 3:52 PM | 404 Views
MSI-ECS has been appointed as Philippines’ distributor for Juniper Networks, across Juniper’s full range of high-performance networking, security, data center and cloud solutions. MSI-ECS, one of the country’s largest ICT distributors, will support Juniper’s...See More

 
Lenovo Introduces New Laptops for the ‘Modern Avid Gamer’
Techworld Date Posted: 17 August 2018 5:23 PM | 564 Views
Lenovo, a global leader in PCs and smart devices development, is launching two new laptops designed to meet the demands of the ‘modern avid gamers’. . See More
 
Lenovo Introduces New Laptops for the ‘Modern Avid Gamer’
Techworld Date Posted: 5:23 PM | 564 Views
Lenovo, a global leader in PCs and smart devices development, is launching two new laptops designed to meet the demands of the ‘modern avid gamers’. See More

 
Chafer Cyberespionage Group Targets Embassies with Updated Homebrew Spyware
Techworld Date Posted: 7 February 2019 2:07 PM | 116 Views
Kaspersky Lab researchers have detected multiple attempts to infect foreign diplomatic entities in Iran with homebrew spyware. The attacks appear to be using an updated Remexi backdoor. Several legitimate tools were also used during.... See More
 
Chafer Cyberespionage Group Targets Embassies with Updated Homebrew Spyware
Techworld Date Posted: 2:07 PM | 116 Views
Kaspersky Lab researchers have detected multiple attempts to infect foreign diplomatic entities in Iran with homebrew spyware. The attacks appear to be using an updated Remexi backdoor. Several legitimate tools were also used during...See More

 
Nokia Smartphones Serve First Slice of Android™ 9 Pie
Techworld Date Posted: 23 October 2018 10:42 AM | 128 Views
HMD Global, the home of Nokia phones, has announced that Android™ 9 is already available for the Nokia 6.1 Plus via Nokia phones beta labs. This follows the Nokia 7 Plus. See More
 
Nokia Smartphones Serve First Slice of Android™ 9 Pie
Techworld Date Posted: 10:42 AM | 128 Views
HMD Global, the home of Nokia phones, has announced that Android™ 9 is already available for the Nokia 6.1 Plus via Nokia phones beta labs. This follows the Nokia 7 PlusSee More


Power by

Download Free AZ | Free Wordpress Themes