Forest Global Training Partners

Cyber Risks · Krebs on Security

Espionage Attacks Against Ruskies?

Summary: FireEye researchers reported an email malware campaign using Russian-language lures and an embedded Microsoft Word exploit that displayed a decoy document about an ASEAN meeting, with control infrastructure in Korea and Japan but clues pointing to Chinese design and operation. Stolen data was sent to a public message board requiring no authentication, and most victim PCs traced to Internet addresses in Russia, including the SuperComputer Center of the Russian Academy of Sciences; FireEye later updated its assessment to name Korea as the likely source.

Key Takeaway: The attackers compromised high-profile Russian research institutions while hiding in plain sight, using methods that cost them nothing - a reminder that an espionage network does not require sophisticated tooling, only an unauthenticated drop site and a lure someone will open.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related