Threat Advisory: Opportunistic cyber criminals take advantage of Ukraine invasion
Summary: Cisco Talos reported a rise in Ukraine-themed email lures since late February, including charity and Bitcoin donation requests, a German-language phishing email posing as a major Bitcoin marketplace, and malware spam using an Excel attachment that exploits CVE-2017-11882 to deliver the Remcos RAT. One spoofed Ukrainian government aid email carried an Office document that fetched a Remcos payload, and its supplied Bitcoin wallet had received approximately $5,500 at the time of writing.
Why it matters: The attackers moved recipients off email to WhatsApp and pulled in roughly $5,500 in Bitcoin through a single spoofed aid message, and Talos notes scams are hard to block when trusted accounts send the mail, especially in BEC.
Read the original at Cisco Talos ↗
- Topics
- Phishing & Social Engineering
- Mentions
- CVE-2017-11882
- Related
- Threat Source newsletter (June 24, 2021) Cyber Risks ·