“Kaspersky Lab” reported cyber espionage for organizations of the Crimea, DPR and LPR
[ad_1]
Since 2021, hackers have been conducting a cyber-espionage campaign against government, agricultural and transport organizations in the Donetsk, Lugansk People’s Republics and Crimea, Kaspersky Lab found out. For this, cloud technologies are used.
“We are following this campaign. Notable in it is not malware and techniques – they are not the most ingenious – but the fact that cloud storage is used as a command and control infrastructure, ”said Leonid Bezvershenko, a cybersecurity expert at Kaspersky Lab. RBC.
For cyberattacks, a previously unknown malware called CommonMagic is used. Victims are sent phishing emails on behalf of government agencies. The ZIP archives offered for download contain two files – a decoy document and a malicious LNK file with a double extension (for example, .pdf.lnk). When the file is opened, the PowerMagic backdoor penetrates the device. it receives commands from a remote folder located in the public cloud, executes them, and uploads the results to the cloud. PowerMagic stays on the system after a reboot. According to Kaspersky Lab, hackers can steal files from USB devices and take screenshots every three seconds.
According to Rostelecom-Solar, Russian companies in the field of cybersecurity record a decrease in the number of attacks by non-professional but politically motivated hackers on the infrastructure of Russian companies and departments. Some hacktivists lost interest in participating in attacks over the year, while others decided to improve their skills and join professional groups, experts say.
More details – in the material “Kommersant” “Quantity turns into khakism.”
[ad_2]
Source link
