Kaspersky Lab researchers have detected a new wave of financial spear-phishing emails disguised as legitimate procurement and accounting letters that hit at least 400 industrial organizations in an attempt to earn money for the cybercriminals.

 

The series of attacks started back in autumn 2017 and targeted several hundreds of company PCs in industries ranging from oil and gas, to metallurgy, energy, construction, and logistics.

 

In the detected wave, the criminals not only attacked industrial companies together with other organizations, they were predominantly focused on them. They sent out emails containing malicious attachments and try to lure unsuspecting victims into giving away confidential data, which they could then use to make money.

 

According to Kaspersky Lab data, this wave of emails targeted around 800 employee PCs, with the goal of stealing money and confidential data from the organizations, which can then be used in new attacks.

 

The emails were disguised as legitimate procurement and accounting letters, containing content that corresponded to the profile of the attacked organizations and took into account the identity of the employee – the recipient of the letter.

 

It is noteworthy that the attackers even addressed the targeted victims by name. This suggests that the attacks were carefully prepared and that criminals took the time to develop an individual letter for each user.

 

When the recipient clicked on the malicious attachments, modified legitimate software was discreetly installed on the computer so that criminals could connect to it, examine documents and software related to the procurement, financial and accounting operations.

 

Furthermore, the attackers were looking for different ways to commit financial fraud, such as changing requisites in payment bills in order to withdraw money for their benefit.

 

Moreover, whenever criminals needed additional data or capabilities, such as obtaining local administrator rights or stealing user authentication data and Windows accounts to spread within the enterprise network, the attackers uploaded additional sets of malware, prepared individually for an attack on each victim.

 

This included spyware, additional remote administration tools that extend the control of attackers on infected systems and malware to exploit vulnerabilities in the operating system, as well as the Mimikatz tool that allows users to obtain data from Windows accounts.

 

“The attackers demonstrated a clear interest in targeting industrial companies. Based on our experiences, this is likely to be due to the fact that their level of cybersecurity awareness is not as high as it is in other markets such as financial services. That makes industrial companies a lucrative target for cybercriminals,” said Vyacheslav Kopeytsev, security expert at Kaspersky Lab.

 

Kaspersky Lab researchers advise users to follow these key measures in order to be protected against spear-phishing attacks:

  • use security solutions with dedicated functionality aimed at detecting and blocking phishing attempts. Businesses can protect their on-premise email systems with targeted applications inside the Kaspersky Endpoint Security for Business suite. Kaspersky Security for Microsoft Office 365 helps to protect the cloud-based mail service Exchange Online inside the Microsoft Office 365 suite.
  • introduce security awareness initiatives, including gamified training with skills assessments and reinforcement through the repetition of simulated phishing attacks. Kaspersky Lab customers would benefit from using the Kaspersky Security Awareness Training services.

 

To learn more about the financial phishing threat, please read the blog post available at ICS-CERT.kaspersky.com.

 


RECOMMENDED ARTICLE FOR TECHWORLD


 
Realme Philippines Offers Wide-Activities for Lazada 12.12 Including Whole-Day Sale of Php5,490 for Realme C1
Techworld Date Posted: 10 December 2018 1:34 PM | 297 Views
The Realme C1, the #RealEntryLevelKing, redefines the benchmark for entry-level smartphones, packing software and hardware features previously not available in devices in the same price segment.. See More
 
Realme Philippines Offers Wide-Activities for Lazada 12.12 Including Whole-Day Sale of Php5,490 for Realme C1
Techworld Date Posted: 1:34 PM | 297 Views
The Realme C1, the #RealEntryLevelKing, redefines the benchmark for entry-level smartphones, packing software and hardware features previously not available in devices in the same price segment.See More

 
Hidden Miners on Google Play
Techworld Date Posted: 11 April 2018 4:48 PM | 466 Views
  Kaspersky Lab’s researchers have discovered that more and more cyber criminals are turning their attention to malicious software that mines cryptocurrencies at the expense of users’ mobile devices. These criminals are getting greedier.... See More
 
Hidden Miners on Google Play
Techworld Date Posted: 4:48 PM | 466 Views
  Kaspersky Lab’s researchers have discovered that more and more cyber criminals are turning their attention to malicious software that mines cryptocurrencies at the expense of users’ mobile devices. These criminals are getting greedier...See More

 
New Forces Join Popular Team Group Gaming T-FORCE Series
Techworld Date Posted: 30 September 2017 9:35 AM | 517 Views
Team Group, world renowned memory solutions and accessory provider, is proud to announce today the addition of new products as to their prestigious T-FORCE gaming line of products. See More
 
New Forces Join Popular Team Group Gaming T-FORCE Series
Techworld Date Posted: 9:35 AM | 517 Views
Team Group, world renowned memory solutions and accessory provider, is proud to announce today the addition of new products as to their prestigious T-FORCE gaming line of productsSee More

 
OPPO F9 Elevates Smartphone Standard with Revolutionary VOOC Flash Charge, 6GB RAM, and Gradient Body Design
Techworld Date Posted: 16 August 2018 5:03 PM | 167 Views
Global smartphone innovator OPPO has revealed its latest product in the Philippines—the OPPO F9. Unveiled during the grand launch at Shangri-la at the Fort, the OPPO F9 has made breakthroughs in fast charging, dual.... See More
 
OPPO F9 Elevates Smartphone Standard with Revolutionary VOOC Flash Charge, 6GB RAM, and Gradient Body Design
Techworld Date Posted: 5:03 PM | 167 Views
Global smartphone innovator OPPO has revealed its latest product in the Philippines—the OPPO F9. Unveiled during the grand launch at Shangri-la at the Fort, the OPPO F9 has made breakthroughs in fast charging, dual...See More

 
ASRock Kicks Off Mini PC Revolution with the World’s 1st Micro-STX DeskMini RX/GTX System
Techworld Date Posted: 31 January 2017 3:31 AM | 459 Views
Consumers nowadays are seeking for a tiny yet powerful computing gear. Hence, ASRock made its refresh DeskMini system debut at the recently concluded CES 2017.. See More
 
ASRock Kicks Off Mini PC Revolution with the World’s 1st Micro-STX DeskMini RX/GTX System
Techworld Date Posted: 3:31 AM | 459 Views
Consumers nowadays are seeking for a tiny yet powerful computing gear. Hence, ASRock made its refresh DeskMini system debut at the recently concluded CES 2017.See More

 
Sowbug: Cyber Espionage Group Targets South American and Southeast Asian Governments
Techworld Date Posted: 10 November 2017 11:03 AM | 357 Views
Symantec has identified a previously unknown group called Sowbug that has been conducting highly targeted cyber attacks against organizations in South America and Southeast . See More
 
Sowbug: Cyber Espionage Group Targets South American and Southeast Asian Governments
Techworld Date Posted: 11:03 AM | 357 Views
Symantec has identified a previously unknown group called Sowbug that has been conducting highly targeted cyber attacks against organizations in South America and Southeast See More

 
Filipino Microfinance Institution Deploys SD-WAN to Boost Network Reliability and Improve the Lives of Women in Rural Communities
Techworld Date Posted: 27 April 2019 10:06 AM | 62 Views
Riverbed®, The Digital Performance Company™, has announced that Negros Women for Tomorrow Foundation (NWTF), one of the Philippines’ oldest and largest microfinance institutions, is advancing the human experience in the digital world through next-generation.... See More
 
Filipino Microfinance Institution Deploys SD-WAN to Boost Network Reliability and Improve the Lives of Women in Rural Communities
Techworld Date Posted: 10:06 AM | 62 Views
Riverbed®, The Digital Performance Company™, has announced that Negros Women for Tomorrow Foundation (NWTF), one of the Philippines’ oldest and largest microfinance institutions, is advancing the human experience in the digital world through next-generation...See More

 
Transcend Releases Lightning-fast PCIe Solid-state Drive for Mac Computers
Techworld Date Posted: 29 August 2017 3:50 PM | 277 Views
Transcend Information Inc., a leading manufacturer of storage and multimedia products, is proud to announce the release of the JetDrive 820 PCI Express (PCIe) Gen 3.0 solid-state drive (SSD) for Mac computers. The JetDrive.... See More
 
Transcend Releases Lightning-fast PCIe Solid-state Drive for Mac Computers
Techworld Date Posted: 3:50 PM | 277 Views
Transcend Information Inc., a leading manufacturer of storage and multimedia products, is proud to announce the release of the JetDrive 820 PCI Express (PCIe) Gen 3.0 solid-state drive (SSD) for Mac computers. The JetDrive...See More

 
HMD Global, the Home of Nokia Phones, Brings Back Snake through Facebook AR Feature
Techworld Date Posted: 4 August 2018 10:05 AM | 558 Views
HMD Global, the home of Nokia phones, introduces an enhanced version of the classic Snake with augmented reality through Facebook’s camera feature.. See More
 
HMD Global, the Home of Nokia Phones, Brings Back Snake through Facebook AR Feature
Techworld Date Posted: 10:05 AM | 558 Views
HMD Global, the home of Nokia phones, introduces an enhanced version of the classic Snake with augmented reality through Facebook’s camera feature.See More

 
Star Wars™: Jedi Challenges, A New Smartphone-Powered Augmented Reality Experience Is Now in the Philippines
Techworld Date Posted: 8 November 2017 5:23 PM | 334 Views
Lenovo (HKSE: 992) (ADR: LNVGY) and Disney today unveiled Star Wars: Jedi Challenges, a new augmented reality Star Wars product that allows fans to experience Star Wars in ways never before possible. See More
 
Star Wars™: Jedi Challenges, A New Smartphone-Powered Augmented Reality Experience Is Now in the Philippines
Techworld Date Posted: 5:23 PM | 334 Views
Lenovo (HKSE: 992) (ADR: LNVGY) and Disney today unveiled Star Wars: Jedi Challenges, a new augmented reality Star Wars product that allows fans to experience Star Wars in ways never before possibleSee More


Power by

Download Free AZ | Free Wordpress Themes