Hackers attacked Russian companies in June under the guise of a call-up and mobilization mailing list
[ad_1]
The Bi.Zone service this month recorded a massive phishing mailing of letters to Russian companies. Letters were sent under the guise of documents from government agencies on conscription and mobilization.
According to the service, hackers used spoofing (forged the sender’s address). Recipients received letters with the following topics: “Call for mobilization”, “General mobilization 2023”, “Reconciliation of documents of the Military Commissariat”, “Conscripts 2023 list”. The email either contained an archive or a link to download it.
The archive contained a malicious file that installed the DCRat Trojan on the device. Such software allows you to “get full control over the compromised system,” including by obtaining passwords, Bi.Zone specified.
“With the help of DCRat, attackers take screenshots, record keystrokes, get the contents of the clipboard, etc. As a result, criminals may have logins and passwords from corporate accounts, financial information, personal data, and other confidential information,” says V press release service.
According to Positive Technologies, the number of hacker attacks on Russian companies using ransomware viruses (encrypting files on devices, after which ransomware requires a fee to return to normal operation) has grown by 77% year-to-date. The trend is confirmed by FAC.C.T. (former Group-IB), according to which, the number of such attacks from January to May 2023 increased by 50-60%.
Details – in the material “Kommersant” “Cryptologists went up”.
[ad_2]
Source link
