Small countries are jumping on the hacking tool bandwagon

Caute_cautim — Mon, 09 Oct 2023 09:45:19 GMT

Hi All

Not immediately obvious, but countries with less resources, are now jumping on the cyber security hacking and using tools readily available against their own people and other countries:

https://www.darkreading.com/vulnerabilities---threats/even-small-nations-have-jumped-into-the-cyber-espionage-game/d/d-id/1339846?_mc=rss_x_drr_edt_aud_dr_x_x-rss-simple

Regards

Caute_Cautim

Re: Small countries are jumping on the hacking tool bandwagon

Andrade265 — Mon, 11 Jan 2021 04:34:47 GMT

the Red Drip team reported that APT36 was using a decoy health advisory document to spread a Remote Administration Tool (RAT).

Re: Small countries are jumping on the hacking tool bandwagon

Caute_cautim — Mon, 11 Jan 2021 04:55:50 GMT

@Andrade265that is disturbing https://www.varonis.com/blog/apt-groups/

Mythic Leopard has been linked to Pakistan and mainly focuses its resources on hacking and spear-phishing Indian government entities. The driving force behind these attacks is espionage to gain intelligence from the Indian government, military and other private Indian sectors. Using spear-phishing emails, Mythic Leopard was able to infect targets using a malicious Excel file.

Origin: Pakistan
Established: 2016
Primary Targets: India and the Indian Army
Weapon of Choice: Social Engineering

Previously, they would have used proxies to do their dirty work or paid for others to carry it out.

Plus the fact that Pakistan and India have a long standing hatred of each other too.

Indian governmental defense organizations and their personnel are the latest victims of APT36, a Seqrite article reports. Fake profiles of attractive women are used as bait in honey traps set up by APT36. Those that visit the fake profiles receive emails with attachments or are engaged in conversations over messaging applications where they are presented with links to malware or the malware itself. Once the victim opens the attachment, Crimson RAT is subsequently installed on their system. Crimson RAT is known for stealing data and reporting it back to its command and control servers. This campaign has been labeled "Operation Honey Pot" by Seqrite. For full technical details of this campaign, please see the link in the Reference section below.

https://www.seqrite.com/blog/operation-honey-trap-apt36-targets-defense-organizations-in-india/

Regards

Cautim_Caute

topic Re: Small countries are jumping on the hacking tool bandwagon in Threats

Small countries are jumping on the hacking tool bandwagon

Re: Small countries are jumping on the hacking tool bandwagon

Re: Small countries are jumping on the hacking tool bandwagon