Kaspersky Lab researchers have detected a new wave of financial spear-phishing emails disguised as legitimate procurement and accounting letters that hit at least 400 industrial organizations in an attempt to earn money for the cybercriminals.

 

The series of attacks started back in autumn 2017 and targeted several hundreds of company PCs in industries ranging from oil and gas, to metallurgy, energy, construction, and logistics.

 

In the detected wave, the criminals not only attacked industrial companies together with other organizations, they were predominantly focused on them. They sent out emails containing malicious attachments and try to lure unsuspecting victims into giving away confidential data, which they could then use to make money.

 

According to Kaspersky Lab data, this wave of emails targeted around 800 employee PCs, with the goal of stealing money and confidential data from the organizations, which can then be used in new attacks.

 

The emails were disguised as legitimate procurement and accounting letters, containing content that corresponded to the profile of the attacked organizations and took into account the identity of the employee – the recipient of the letter.

 

It is noteworthy that the attackers even addressed the targeted victims by name. This suggests that the attacks were carefully prepared and that criminals took the time to develop an individual letter for each user.

 

When the recipient clicked on the malicious attachments, modified legitimate software was discreetly installed on the computer so that criminals could connect to it, examine documents and software related to the procurement, financial and accounting operations.

 

Furthermore, the attackers were looking for different ways to commit financial fraud, such as changing requisites in payment bills in order to withdraw money for their benefit.

 

Moreover, whenever criminals needed additional data or capabilities, such as obtaining local administrator rights or stealing user authentication data and Windows accounts to spread within the enterprise network, the attackers uploaded additional sets of malware, prepared individually for an attack on each victim.

 

This included spyware, additional remote administration tools that extend the control of attackers on infected systems and malware to exploit vulnerabilities in the operating system, as well as the Mimikatz tool that allows users to obtain data from Windows accounts.

 

“The attackers demonstrated a clear interest in targeting industrial companies. Based on our experiences, this is likely to be due to the fact that their level of cybersecurity awareness is not as high as it is in other markets such as financial services. That makes industrial companies a lucrative target for cybercriminals,” said Vyacheslav Kopeytsev, security expert at Kaspersky Lab.

 

Kaspersky Lab researchers advise users to follow these key measures in order to be protected against spear-phishing attacks:

  • use security solutions with dedicated functionality aimed at detecting and blocking phishing attempts. Businesses can protect their on-premise email systems with targeted applications inside the Kaspersky Endpoint Security for Business suite. Kaspersky Security for Microsoft Office 365 helps to protect the cloud-based mail service Exchange Online inside the Microsoft Office 365 suite.
  • introduce security awareness initiatives, including gamified training with skills assessments and reinforcement through the repetition of simulated phishing attacks. Kaspersky Lab customers would benefit from using the Kaspersky Security Awareness Training services.

 

To learn more about the financial phishing threat, please read the blog post available at ICS-CERT.kaspersky.com.

 


RECOMMENDED ARTICLE FOR TECHWORLD


 
Playing an Integral Part of the Nation’s Modernization through Security, Fire and Safety
Techworld Date Posted: 7 August 2018 10:14 AM | 443 Views
The second edition of the Philippines’ leading security, fire and safety event, IFSEC Philippines took place on 29 May – 1 June 2018 at the SMX Convention Center. Attended by 3,879 visitors from around.... See More
 
Playing an Integral Part of the Nation’s Modernization through Security, Fire and Safety
Techworld Date Posted: 10:14 AM | 443 Views
The second edition of the Philippines’ leading security, fire and safety event, IFSEC Philippines took place on 29 May – 1 June 2018 at the SMX Convention Center. Attended by 3,879 visitors from around...See More

 
Kaspersky Lab Deploys Industrial CyberSecurity Solutions, Leverages on iTrust Test Bed
Techworld Date Posted: 22 January 2018 3:13 PM | 213 Views
Kaspersky Lab recently announced the deployment of Kaspersky’s Industrial CyberSecurity (KICS) solutions at the Secure Water Treatment (SWaT) test bed of iTrust, a centre for cyber security research of the Singapore University of Technology.... See More
 
Kaspersky Lab Deploys Industrial CyberSecurity Solutions, Leverages on iTrust Test Bed
Techworld Date Posted: 3:13 PM | 213 Views
Kaspersky Lab recently announced the deployment of Kaspersky’s Industrial CyberSecurity (KICS) solutions at the Secure Water Treatment (SWaT) test bed of iTrust, a centre for cyber security research of the Singapore University of Technology...See More

 
Nokia 5.1 Plus Takes a Sweet Taste of Android™ 9 Pie at the Start of the Year
Techworld Date Posted: 8 January 2019 1:50 PM | 48 Views
HMD Global, the home of Nokia phones, has announced that Filipino Nokia fans can now enjoy the latest Android operating system, Android 9 Pie on their Nokia 5.1 Plus. . See More
 
Nokia 5.1 Plus Takes a Sweet Taste of Android™ 9 Pie at the Start of the Year
Techworld Date Posted: 1:50 PM | 48 Views
HMD Global, the home of Nokia phones, has announced that Filipino Nokia fans can now enjoy the latest Android operating system, Android 9 Pie on their Nokia 5.1 Plus. See More

 
The Akamai Roundup
Techworld Date Posted: 13 July 2017 3:37 PM | 331 Views
Did you know 64% of connected consumers across Asia Pacific are watching online video content daily? Evidently, there is a strong appetite for online video consumption in the region. From major sporting event finals.... See More
 
The Akamai Roundup
Techworld Date Posted: 3:37 PM | 331 Views
Did you know 64% of connected consumers across Asia Pacific are watching online video content daily? Evidently, there is a strong appetite for online video consumption in the region. From major sporting event finals...See More

 
The ASEAN Foundation and SAP Extend Strategic Collaboration to Drive Positive Social Impact in the Digital Economy
Techworld Date Posted: 1 December 2017 4:00 PM | 273 Views
In the photo (L-R) His Excellency Vongthep Arthakaivalvatee, Deputy Secretary General of ASEAN for Socio-Cultural Community, Claus Andresen, President and Managing Director of SAP Southeast Asia, Elaine Tan, Executive Director of the ASEAN Foundation.... See More
 
The ASEAN Foundation and SAP Extend Strategic Collaboration to Drive Positive Social Impact in the Digital Economy
Techworld Date Posted: 4:00 PM | 273 Views
In the photo (L-R) His Excellency Vongthep Arthakaivalvatee, Deputy Secretary General of ASEAN for Socio-Cultural Community, Claus Andresen, President and Managing Director of SAP Southeast Asia, Elaine Tan, Executive Director of the ASEAN Foundation...See More

 
Aruba Modernizes Network Security to Help Businesses Reduce Risk in the Era of Mobile, Cloud and IoT
Techworld Date Posted: 23 September 2017 1:04 PM | 253 Views
Aruba, a Hewlett Packard Enterprise company (NYSE:HPE), today announced the Aruba 360 Secure Fabric, a security framework that provides 360 degrees of analytics-driven attack detection and response to help organizations reduce risk in today's.... See More
 
Aruba Modernizes Network Security to Help Businesses Reduce Risk in the Era of Mobile, Cloud and IoT
Techworld Date Posted: 1:04 PM | 253 Views
Aruba, a Hewlett Packard Enterprise company (NYSE:HPE), today announced the Aruba 360 Secure Fabric, a security framework that provides 360 degrees of analytics-driven attack detection and response to help organizations reduce risk in today's...See More

 
Hitachi Vantara to Extend Reach in Philippines with Strategic MSI–ECS Partnership
Techworld Date Posted: 6 July 2018 3:42 PM | 460 Views
Manila, Philippines — Hitachi Vantara, a wholly owned subsidiary of Hitachi Ltd. (TSE: 6501), today announced an expansion of its distribution agreement with MSI – ECS Philippines, Inc. beyond Singapore and China.... See More
 
Hitachi Vantara to Extend Reach in Philippines with Strategic MSI–ECS Partnership
Techworld Date Posted: 3:42 PM | 460 Views
Manila, Philippines — Hitachi Vantara, a wholly owned subsidiary of Hitachi Ltd. (TSE: 6501), today announced an expansion of its distribution agreement with MSI – ECS Philippines, Inc. beyond Singapore and China...See More

 
Phantom 4 Advanced vs Phantom 4 Pro: 4 Differences You Need to Know
Techworld Date Posted: 24 August 2017 9:41 AM | 221 Views
DJI's most recent release, the Phantom 4 Advanced, is a slightly altered version of the Phantom 4 Pro unit which came out late last year. Its titanium and magnesium alloy makes the aircraft more durable.... See More
 
Phantom 4 Advanced vs Phantom 4 Pro: 4 Differences You Need to Know
Techworld Date Posted: 9:41 AM | 221 Views
DJI's most recent release, the Phantom 4 Advanced, is a slightly altered version of the Phantom 4 Pro unit which came out late last year. Its titanium and magnesium alloy makes the aircraft more durable...See More

 
Digital Profiling: Kaspersky Lab Experts Uncover How Much Your Smartwatch Can Tell About You
Techworld Date Posted: 8 June 2018 1:51 PM | 273 Views
New research shows that smartwatches can become tools for spying on their owners, by collecting silent accelerometer and gyroscope signals that - after analysis - could be turned into datasets unique to the smartwatch.... See More
 
Digital Profiling: Kaspersky Lab Experts Uncover How Much Your Smartwatch Can Tell About You
Techworld Date Posted: 1:51 PM | 273 Views
New research shows that smartwatches can become tools for spying on their owners, by collecting silent accelerometer and gyroscope signals that - after analysis - could be turned into datasets unique to the smartwatch...See More

PCBG Contributing Writer
Allu Out, GuardiaN In
Techworld • By: PCBG Contributing Writer | Date Posted: 3 August 2017 1:59 PM | 517 Views
After failing to qualify for the quarterfinals at the recent PGL Krakow Major Championship, Natus Vincere shocked many fans due to their visibly poor performance during the group stage matches. It was one of.... See More
PCBG Contributing Writer
Allu Out, GuardiaN In
Techworld • By: PCBG Contributing Writer | Date Posted: 1:59 PM | 517 Views
After failing to qualify for the quarterfinals at the recent PGL Krakow Major Championship, Natus Vincere shocked many fans due to their visibly poor performance during the group stage matches. It was one of...See More


Power by

Download Free AZ | Free Wordpress Themes