Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around October 2021 using politically-themed phishing emails and decoy documents.
The intrusions are part of what Cisco Talos calls a longstanding espionage and information theft campaign undertaken by the Arid Viper hacking group using a Delphi-based implant called Micropsia dating all the way back to June 2017.
The threat actor's activities, also tracked under the monikers Desert Falcon and the APT-C-23, were first documented in February 2015 by Kasperksy and subsequently in 2017, when Qihoo 360 disclosed details of cross-platform backdoors developed by the group to strike Palestinian institutions.
The Russian cybersecurity company-branded Arid Viper the "first exclusively Arabic APT group."
Then in April 2021, Meta (formerly Facebook), which pointed out the group's affiliations to the cyber arm of Hamas, said it took steps to boot the adversary off its platform for distributing mobile malware against individuals associated with pro-Fatah groups, the Palestinian government organizations, military and security personnel, and student groups within Palestine.
Decoy document containing text on Palestinian reunification
The raft of new activity relies on the same tactics and document lures used by the group in 2017 and 2019, suggesting a "certain level of success" despite a lack of change in their tooling. More recent decoy files reference themes of Palestinian reunification and sustainable development in the territory that, when opened, lead to the installation of Micropsia on compromised machines.
The backdoor is designed to give the operators an unusual range of control over the infected devices, including the ability to harvest sensitive information and execute commands transmitted from a remote server, such as capturing screenshots, recording the current activity log, and downloading additional payloads.
"Arid Viper is a prime example of groups that aren't very advanced technologically, however, with specific motivations, are becoming more dangerous as they evolve over time and test their tools and procedures on their targets," researchers Asheer Malhotra and Vitor Ventura said.
"These [remote access trojans] can be used to establish long-term access into victim environments and additionally deploy more malware purposed for espionage and stealing information and credentials."
Read more
- Hacker Techniques Tools And Incident Handling
- Hack Tools
- Hacking Tools For Windows 7
- Hacker Tools List
- Hack Tools For Ubuntu
- Hacker Security Tools
- Pentest Tools Windows
- Hack Website Online Tool
- Hack Tool Apk No Root
- Hacking Tools Software
- Black Hat Hacker Tools
- Hacker Tools Github
- Hacker Tools For Ios
- Hacks And Tools
- Hacker Techniques Tools And Incident Handling
- Pentest Tools Find Subdomains
- Hacking Tools For Pc
- Hacking Tools For Windows Free Download
- Pentest Box Tools Download
- Hacker Tools Online
- Pentest Tools Open Source
- Pentest Tools Find Subdomains
- Usb Pentest Tools
- Kik Hack Tools
- Pentest Tools For Ubuntu
- Hacker
- Hack App
- Pentest Tools For Mac
- Pentest Tools Port Scanner
- Pentest Tools For Android
- Hacker Tools List
- Hacking Tools Usb
- Hacking Tools Software
- Pentest Automation Tools
- Hacker Tools Linux
- Pentest Automation Tools
- Hacking Tools For Mac
- Hacker Tools Apk Download
- Termux Hacking Tools 2019
- Hack Tools For Mac
- Pentest Tools Bluekeep
- Hack Website Online Tool
- Hack Tool Apk No Root
- Hacker Tool Kit
- Pentest Tools Windows
- Hacking Tools For Kali Linux
- Hacking Tools For Windows Free Download
- Hack And Tools
- Hacking Tools Software
- Hacker Tools Online
- Underground Hacker Sites
- Blackhat Hacker Tools
- Pentest Tools Review
- What Is Hacking Tools
- Hacker Hardware Tools
- Hacker Tools Github
- Hack Tools Online
- Hacking Tools Windows
- Pentest Tools For Ubuntu
- Pentest Tools Apk
- Hacking Tools For Beginners
- Pentest Tools Github
- Beginner Hacker Tools
- How To Make Hacking Tools
- Hacking Tools For Windows
- Top Pentest Tools
- Black Hat Hacker Tools
- World No 1 Hacker Software
- Pentest Reporting Tools
- Github Hacking Tools
- Hack Tools For Pc
- Hacking Tools Hardware
- Hack Tools For Pc
- Hacker Tools Hardware
- Hack Tools For Games
- Hacking Tools Software
- Pentest Tools Port Scanner
- Free Pentest Tools For Windows
- Wifi Hacker Tools For Windows
- Underground Hacker Sites
- Hack Tools
- Hacking Apps
- New Hack Tools
- Pentest Tools For Windows
- Pentest Tools For Mac
- Kik Hack Tools
- Hacker Tools
- Game Hacking
- Hacker Search Tools
- Top Pentest Tools
- Pentest Tools Port Scanner
- Hack Tools 2019
- Growth Hacker Tools
- Tools For Hacker
- Hacking Tools Kit
- Hack Apps
- Easy Hack Tools
- Hacking Tools Usb
- Pentest Tools Open Source
- Pentest Tools Free
- Hack Tools Pc
- Hacking Tools For Windows Free Download
- Hackrf Tools
- Usb Pentest Tools
- Hacking Tools For Games
- Computer Hacker
- Hack And Tools
- Hacker Tools Apk
- Hack Tools
- Hacking Tools Windows
- Hacker Security Tools
- Ethical Hacker Tools
- Best Hacking Tools 2020
No comments:
Post a Comment