Kaspersky Lab researchers have detected a new wave of financial spear-phishing emails disguised as legitimate procurement and accounting letters that hit at least 400 industrial organizations in an attempt to earn money for the cybercriminals.

 

The series of attacks started back in autumn 2017 and targeted several hundreds of company PCs in industries ranging from oil and gas, to metallurgy, energy, construction, and logistics.

 

In the detected wave, the criminals not only attacked industrial companies together with other organizations, they were predominantly focused on them. They sent out emails containing malicious attachments and try to lure unsuspecting victims into giving away confidential data, which they could then use to make money.

 

According to Kaspersky Lab data, this wave of emails targeted around 800 employee PCs, with the goal of stealing money and confidential data from the organizations, which can then be used in new attacks.

 

The emails were disguised as legitimate procurement and accounting letters, containing content that corresponded to the profile of the attacked organizations and took into account the identity of the employee – the recipient of the letter.

 

It is noteworthy that the attackers even addressed the targeted victims by name. This suggests that the attacks were carefully prepared and that criminals took the time to develop an individual letter for each user.

 

When the recipient clicked on the malicious attachments, modified legitimate software was discreetly installed on the computer so that criminals could connect to it, examine documents and software related to the procurement, financial and accounting operations.

 

Furthermore, the attackers were looking for different ways to commit financial fraud, such as changing requisites in payment bills in order to withdraw money for their benefit.

 

Moreover, whenever criminals needed additional data or capabilities, such as obtaining local administrator rights or stealing user authentication data and Windows accounts to spread within the enterprise network, the attackers uploaded additional sets of malware, prepared individually for an attack on each victim.

 

This included spyware, additional remote administration tools that extend the control of attackers on infected systems and malware to exploit vulnerabilities in the operating system, as well as the Mimikatz tool that allows users to obtain data from Windows accounts.

 

“The attackers demonstrated a clear interest in targeting industrial companies. Based on our experiences, this is likely to be due to the fact that their level of cybersecurity awareness is not as high as it is in other markets such as financial services. That makes industrial companies a lucrative target for cybercriminals,” said Vyacheslav Kopeytsev, security expert at Kaspersky Lab.

 

Kaspersky Lab researchers advise users to follow these key measures in order to be protected against spear-phishing attacks:

  • use security solutions with dedicated functionality aimed at detecting and blocking phishing attempts. Businesses can protect their on-premise email systems with targeted applications inside the Kaspersky Endpoint Security for Business suite. Kaspersky Security for Microsoft Office 365 helps to protect the cloud-based mail service Exchange Online inside the Microsoft Office 365 suite.
  • introduce security awareness initiatives, including gamified training with skills assessments and reinforcement through the repetition of simulated phishing attacks. Kaspersky Lab customers would benefit from using the Kaspersky Security Awareness Training services.

 

To learn more about the financial phishing threat, please read the blog post available at ICS-CERT.kaspersky.com.

 


RECOMMENDED ARTICLE FOR TECHWORLD


 
Lenovo Continues Support for Youth Organizations, Named Exclusive Technology Partner Anew of TAYO Awards Foundation
Techworld Date Posted: 15 February 2018 5:13 PM | 185 Views
Lenovo, one of the world’s biggest technology companies, is once again the official technology partner of the Ten Accomplished Youth Organizations (TAYO) Awards Foundation, Inc.. See More
 
Lenovo Continues Support for Youth Organizations, Named Exclusive Technology Partner Anew of TAYO Awards Foundation
Techworld Date Posted: 5:13 PM | 185 Views
Lenovo, one of the world’s biggest technology companies, is once again the official technology partner of the Ten Accomplished Youth Organizations (TAYO) Awards Foundation, Inc.See More

 
Be Original, Buy Original
Techworld Date Posted: 12 July 2018 2:04 PM | 118 Views
In line with efforts to bring Nokia fans only the best mobile experience, HMD Global, the home of Nokia phones, warns consumers about counterfeit Nokia phones being sold in physical stores and online shops.. See More
 
Be Original, Buy Original
Techworld Date Posted: 2:04 PM | 118 Views
In line with efforts to bring Nokia fans only the best mobile experience, HMD Global, the home of Nokia phones, warns consumers about counterfeit Nokia phones being sold in physical stores and online shops.See More

 
HyperX Joins ESGS 2017 with Team Execration
Techworld Date Posted: 25 October 2017 10:38 AM | 326 Views
HyperX, the gaming division of Kingston Technology, today announced their presence at ESGS 2017 and all the fun activities to engage with the vast Filipino Gaming Community at SMX Convention Center from October 27th.... See More
 
HyperX Joins ESGS 2017 with Team Execration
Techworld Date Posted: 10:38 AM | 326 Views
HyperX, the gaming division of Kingston Technology, today announced their presence at ESGS 2017 and all the fun activities to engage with the vast Filipino Gaming Community at SMX Convention Center from October 27th...See More

 
Apacer AC532 USB 3.1 Gen 1 Portable Hard Drive: Anti-Vibration Internal Suspension Structure, 1-Meter Shockproof and Anti-Slip Design
Techworld Date Posted: 23 August 2017 11:30 AM | 237 Views
Apacer launches the brand-new AC532, a classic portable hard drive combining a slim shape with great protection design, making it a high price-performance choice in portable hard drives. AC532 is equipped with an anti.... See More
 
Apacer AC532 USB 3.1 Gen 1 Portable Hard Drive: Anti-Vibration Internal Suspension Structure, 1-Meter Shockproof and Anti-Slip Design
Techworld Date Posted: 11:30 AM | 237 Views
Apacer launches the brand-new AC532, a classic portable hard drive combining a slim shape with great protection design, making it a high price-performance choice in portable hard drives. AC532 is equipped with an anti...See More

PCBG Contributing Writer
The Genius Behind Threadripper
Techworld • By: PCBG Contributing Writer | Date Posted: 2 August 2017 10:12 AM | 232 Views
Lisa Su, for those in the dark, is a Silicon Valley genius. She is one of the biggest names in the semiconductor business, a notable Forbes name for one of the most creative female.... See More
PCBG Contributing Writer
The Genius Behind Threadripper
Techworld • By: PCBG Contributing Writer | Date Posted: 10:12 AM | 232 Views
Lisa Su, for those in the dark, is a Silicon Valley genius. She is one of the biggest names in the semiconductor business, a notable Forbes name for one of the most creative female...See More

 
Apacer Launches the AH336 and AC233 in Partnership with P714
Techworld Date Posted: 3 November 2017 10:45 AM | 334 Views
When pursuing a dream, we all need the support and company of friends. Apacer partnered with P714, a Taiwanese illustration brand famous for their heartwarming, adorable designs, in creating 3 special edition flash drives.... See More
 
Apacer Launches the AH336 and AC233 in Partnership with P714
Techworld Date Posted: 10:45 AM | 334 Views
When pursuing a dream, we all need the support and company of friends. Apacer partnered with P714, a Taiwanese illustration brand famous for their heartwarming, adorable designs, in creating 3 special edition flash drives...See More

 
Symantec Simplifies Cloud Migration with Management Center 2.0
Techworld Date Posted: 29 August 2018 3:46 PM | 112 Views
Symantec Corp. (NASDAQ: SYMC), the world’s leading cyber security company, has announced significant enhancements to Symantec Management Center. The centralized solution manages the network portfolio inside of the Symantec Integrated Cyber Defense Platform, allowing.... See More
 
Symantec Simplifies Cloud Migration with Management Center 2.0
Techworld Date Posted: 3:46 PM | 112 Views
Symantec Corp. (NASDAQ: SYMC), the world’s leading cyber security company, has announced significant enhancements to Symantec Management Center. The centralized solution manages the network portfolio inside of the Symantec Integrated Cyber Defense Platform, allowing...See More

 
Enjoy Up to 30 Percent Discount on Booking.com Accommodations with PLDT and Smart
Techworld Date Posted: 15 September 2018 2:13 PM | 116 Views
In line with their thrust to give customers epic and incredible experiences, leading telco and digital services provider PLDT, Inc. and its mobile services arm Smart Communications, Inc. have teamed up with Booking.com to.... See More
 
Enjoy Up to 30 Percent Discount on Booking.com Accommodations with PLDT and Smart
Techworld Date Posted: 2:13 PM | 116 Views
In line with their thrust to give customers epic and incredible experiences, leading telco and digital services provider PLDT, Inc. and its mobile services arm Smart Communications, Inc. have teamed up with Booking.com to...See More

 
Kaspersky Lab Appeals U.S. Department of Homeland Security Debarment
Techworld Date Posted: 19 December 2017 11:46 AM | 199 Views
Kaspersky Lab announced today that it is seeking an appeal in federal court of U.S. Department of Homeland Security’s (DHS) decision on Binding Operational Directive 17-01 banning the use of the company’s products in.... See More
 
Kaspersky Lab Appeals U.S. Department of Homeland Security Debarment
Techworld Date Posted: 11:46 AM | 199 Views
Kaspersky Lab announced today that it is seeking an appeal in federal court of U.S. Department of Homeland Security’s (DHS) decision on Binding Operational Directive 17-01 banning the use of the company’s products in...See More

 
Motorola Strengthens Local Footprint with First Retail Kiosk Outside Manila
Techworld Date Posted: 25 September 2017 11:22 AM | 254 Views
BATANGAS, Philippines - September 25, 2017. Motorola Philippines continues to solidify its presence in the Philippines and make the Motorola experience more accessible to Filipinos nationwide with the opening of the Motorola Kiosk in.... See More
 
Motorola Strengthens Local Footprint with First Retail Kiosk Outside Manila
Techworld Date Posted: 11:22 AM | 254 Views
BATANGAS, Philippines - September 25, 2017. Motorola Philippines continues to solidify its presence in the Philippines and make the Motorola experience more accessible to Filipinos nationwide with the opening of the Motorola Kiosk in...See More


Power by

Download Free AZ | Free Wordpress Themes