Forest Global Training Partners

Cyber Risks · Krebs on Security

Security Firm Redefines APT: African Phishing Threat

Summary: Security vendor root9B reported in May 2015 that it had uncovered plans by the Russian APT28/Sofacy group to attack US banks including Bank of America, Regions Bank and TD Bank, a claim picked up by Fox News, Politico, SC Magazine and The Hill. Krebs on Security's analysis tied the fake bank domains instead to email addresses such as adeweb2001@yahoo.com and rolexzad@yahoo.com long associated with Nigerian phishing scammers, with the only Sofacy link being shared use of the carbon2u.com name server.

Bottom line: AlienVault's Jaime Blasco called the research 'very poor,' and root9B Chairman Joe Grano bought large quantities of the firm's stock roughly a week before the report, which preceded its first quarter 2015 financial results on May 14, 2015. A vendor's attribution claim can move markets and shape how your board reads the threat landscape, so the sourcing behind it deserves the same scrutiny as the intrusion itself.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related