Territory disputes between India and its neighbours are targets for malware campaigns


The group’s target include multiple government and military units, primarily in Nepal and Afghanistan, researchers at Trend Micro, a cybersecurity firm, said in a report.

(Subscribe to our Today’s Cache newsletter for a quick snapshot of top 5 tech stories. Click here to subscribe for free.)

The recent territory disputes between India, China, Pakistan and Nepal came in handy for a cybercrime group SideWinder. It launched phishing and malware attacks using territory dispute themes to lure users.

The group’s target include multiple government and military units, primarily in Nepal and Afghanistan, researchers at Trend Micro, a cybersecurity firm, said in a report.

They found a server used to deliver malicious LNK file and host multiple credential phishing pages, which were copied from victims’ webmail login pages and modified for phishing.

After the gathered credentials are sent, some of the phishing pages redirect victims to different documents or news pages with themes related to COVID-19 or territory disputes between India and neighbouring countries.

SideWinder group has become famous for targeting countries in the South Asian region. The group had previously launched attacks against Pakistan, Bangladesh, and China using lure files related to COVID-19.

Trend Micro collected different samples from the campaign and found that all cases either downloaded or dropped files, and then executed JavaScript code to install the main backdoor + stealer.

“Although it’s not clear to us how these phishing pages are delivered to the victims, finding the original webmail servers that they copied to make these phishing pages allows us to identify who they were targeting,” researchers noted.

You have reached your limit for free articles this month.

Subscription Benefits Include

Today’s Paper

Find mobile-friendly version of articles from the day’s newspaper in one easy-to-read list.

Unlimited Access

Enjoy reading as many articles as you wish without any limitations.

Personalised recommendations

A select list of articles that match your interests and tastes.

Faster pages

Move smoothly between articles as our pages load instantly.

Dashboard

A one-stop-shop for seeing the latest updates, and managing your preferences.

Briefing

We brief you on the latest and most important developments, three times a day.

Support Quality Journalism.

*Our Digital Subscription plans do not currently include the e-paper, crossword and print.

.



Source link

Leave a Reply

Your email address will not be published. Required fields are marked *