Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

Andromeda Botnet Targets Italy in Recent Spam Campaigns

Summary: Palo Alto Networks observed two spam campaigns over the past month targeting users in Italy with the Andromeda malware, which has circulated since 2011. The two campaigns produced approximately 210,000 emails, 97% of them sent to users in Italy, with senders apparently spoofing the Italian hosting provider Aruba and the insurance and high tech industries primarily targeted.

What you should know: Compromised hosts join the Andromeda botnet, which lets attackers push plugins or additional malware onto victim machines - and the same family has previously delivered point-of-sale malware such as GamaPOS. A spoofed, familiar Italian brand like Aruba is what gets the attachment opened.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related