Cybersecurity researchers on Monday said they uncovered evidence of attempted attacks by a Russia-linked hacking operation targeting a Ukrainian entity in July 2021.
Broadcom-owned Symantec, in a new report published Monday, attributed the attacks to an actor tracked as Gamaredon (aka Shuckworm or Armageddon), a cyber-espionage collective known to be active since at least 2013.
In November 2021, Ukrainian intelligence agencies branded the group as a "special project" of Russia's Federal Security Service (FSB), in addition to pointing fingers at it for carrying out over 5,000 cyberattacks against public authorities and critical infrastructure located in the country.
Gamaredon attacks typically originate with phishing emails that trick the recipients into installing a custom remote access trojan called Pterodo. Symantec disclosed that, between July 14, 2021 and August 18, 2021, the actor installed several variants of the backdoor as well as deployed additional scripts and tools.
"The attack chain began with a malicious document, likely sent via a phishing email, which was opened by the user of the infected machine," the researchers said. The identity of the affected organization was not disclosed.
Towards the end of July, the adversary leveraged the implant to download and run an executable file that acted as a dropper for a VNC client before establishing connections with a remote command-and-control server under their control.
"This VNC client appears to be the ultimate payload for this attack," the researchers noted, adding the installation was followed by accessing a number of documents ranging from job descriptions to sensitive company information on the compromised machine.
Ukraine Calls Out False Flag Operation in Wiper Attacks
The findings come amidst a wave of disruptive and destructive attacks levied against Ukrainian entities by alleged Russian state-sponsored actors, resulting in the deployment of a file wiper dubbed WhisperGate, around the same time multiple websites belonging to the government were defaced.
Subsequent investigation into the malware has since revealed that the code used in the wiper was re-purposed from a faux ransomware campaign called WhiteBlackCrypt that was aimed at Russian victims in March 2021.
Interestingly, the ransomware is known to include a trident symbol — that is part of Ukraine's coat of arms — in the ransom note it displays to its victims, leading Ukraine to suspect that this may have been a false flag operation deliberately intended to blame a "fake" pro-Ukrainian group for staging an attack on their own government.
Related posts
- Pentest Reporting Tools
- Pentest Tools Linux
- Hacker Tools List
- Hacking Tools Pc
- Android Hack Tools Github
- Hack Tools
- Hacking Tools 2019
- Pentest Tools For Ubuntu
- Pentest Tools Download
- New Hacker Tools
- Pentest Tools Android
- Pentest Tools For Ubuntu
- Game Hacking
- How To Hack
- Pentest Tools Open Source
- Hacking Tools For Beginners
- Hacker
- Hack Tools Github
- Pentest Tools For Ubuntu
- New Hack Tools
- Hack Tools Mac
- What Are Hacking Tools
- Nsa Hack Tools Download
- Hacker Tools Mac
- Pentest Tools Github
- Pentest Tools For Ubuntu
- Nsa Hacker Tools
- Hacker Tools Linux
- Pentest Tools Alternative
- Best Pentesting Tools 2018
- Hacking Tools Software
- Hacker Tools Linux
- Pentest Tools Windows
- Pentest Tools Review
- Best Hacking Tools 2019
- Best Pentesting Tools 2018
- Hacking Tools Mac
- Hack Tools
- Tools 4 Hack
- Hackers Toolbox
- World No 1 Hacker Software
- What Is Hacking Tools
- Pentest Tools Alternative
- How To Install Pentest Tools In Ubuntu
- Easy Hack Tools
- Hacking App
- Hack Tools For Windows
- Hacking Tools Free Download
- Pentest Recon Tools
- Pentest Tools Tcp Port Scanner
- Hacker Tools For Windows
- Hacking Tools Kit
- Hack Tool Apk
- Hacking Tools For Pc
- Pentest Automation Tools
- Pentest Tools Tcp Port Scanner
- What Are Hacking Tools
- Hacking Tools For Pc
- Bluetooth Hacking Tools Kali
- Hacker Tools For Windows
- Pentest Tools For Ubuntu
- Hacking Tools Pc
- Hack Rom Tools
- Pentest Box Tools Download
- Best Pentesting Tools 2018
- Hacker Tools List
- Hacking Tools
- Hacking Tools For Windows 7
- Pentest Tools Linux
- Hack Tool Apk
- Hacker Tools For Windows
- Hack Tools Online
- New Hack Tools
- New Hack Tools
- Hacker Tool Kit
- Hacking Tools Pc
- Hacker Tools Hardware
- Pentest Tools Find Subdomains
- Hackrf Tools
- Ethical Hacker Tools
- Hack Rom Tools
- Hacker Techniques Tools And Incident Handling
- Hacking Tools For Kali Linux
- Hack Tools For Games
- Top Pentest Tools
- Free Pentest Tools For Windows
- Hacker Tools Free
- Hacking Tools 2019
- Underground Hacker Sites
- Pentest Tools Url Fuzzer
- Pentest Tools Kali Linux
- Hacking Tools Kit
- Termux Hacking Tools 2019
- Hacker Tool Kit
- Hacking Tools Mac
- Pentest Tools Apk
- World No 1 Hacker Software
- What Is Hacking Tools
- What Is Hacking Tools
- Hack Tools For Mac
- Hacker Tools Apk
- Pentest Tools For Mac
- Best Pentesting Tools 2018
- Hack Tools For Pc
- Hack And Tools
- Hack Tools Online
- Usb Pentest Tools
- Nsa Hack Tools Download
- Pentest Tools Kali Linux
- Easy Hack Tools
- Hacking Tools Software
- Hack Tools For Mac
- New Hack Tools
- Pentest Tools For Mac
- Hack Apps
- Hacking Tools Kit
- Hack Tools 2019
- Hack Tools For Ubuntu
- Pentest Tools For Ubuntu
- Hacks And Tools
- Hacker
- Pentest Tools For Windows
- Hacking Tools For Pc
- Hacking Tools Software
- What Is Hacking Tools
- New Hack Tools
- Hacking Tools For Windows
- How To Install Pentest Tools In Ubuntu
- How To Hack
- Pentest Tools Free
- Hacker Tools Apk
- Hack Tools Download
- Hackers Toolbox
- Pentest Box Tools Download
No hay comentarios:
Publicar un comentario