Silver Terrier: New COVID-19 Themed Business Email Compromise Schemes
Summary: Unit 42 tracked three SilverTerrier actors launching 10 COVID-19 themed malware campaigns over Jan. 30 to Apr. 30, 2020, producing over 170 phishing emails seen across its customer base. Targets included government healthcare agencies, local and regional governments, universities with medical programs, regional utilities, medical publishing firms and insurers in the United States, Australia, Canada, Italy and the United Kingdom, with attachments exploiting CVE 2017-11882 to deliver Lokibot, AgentTesla and Formbook.
Key Takeaway: The FBI counted a record 23,775 BEC attacks in 2019 with an estimated US$1.77 billion in global losses, and these actors showed minimal restraint in targeting organizations central to the COVID-19 response.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Phishing & Social Engineering
- Related
- US disrupts North Korean campaign behind $400 million crypto theft Cyber Risks · Nov 14, 2026North Korea ‘s Crypto Theft Operations: DOJ Seizes $1.2 Billion and Disrupts Hacker Infrastructure Cyber Risks · Nov 13, 2026FBI Says North Korean Hackers Stole Over $400 Million in Crypto Using Deepfake Video Calls Cyber Risks · Nov 13, 2026