ACSC Releases Advisory on Cyber Campaign using Copy-Paste Compromises

ronjor · Jun 22, 2020

Original release date: June 22, 2020

The Australian Cyber Security Centre (ACSC) has released an advisory regarding an ongoing cyber campaign involving “copy-paste compromises” targeting Australian government and commercial networks. According to the advisory, a sophisticated malicious cyber actor is carrying out the campaign using open-source code that exploits known remote code execution vulnerabilities and spearphishing attacks.
The Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the tactics, techniques, and procedures and mitigations identified in ASCS Advisory 2020-008 as well as:
CISA Security Tip: Questions Every CEO Should Ask About Cyber Risks
CISA Security Tip: Understanding Patches and Software Updates
CISA Security Tip: Supplementing Passwords
Click to expand...

guest · Sep 18, 2020

ACSC
Copy-paste compromises
September 16, 2020
https://www.cyber.gov.au/acsc/view-all-content/alerts/copy-paste-compromises

The Australian Government is aware of, and responding to, a sustained targeting of Australian governments and companies by a sophisticated state-based actor.
The title ‘Copy-paste compromises’ is derived from the actor’s heavy use of proof-of-concept exploit code, web shells and other tools copied almost identically from open source.

The actor has shown the capability to quickly leverage public exploit proof-of-concepts to target networks of interest and regularly conducts reconnaissance of target networks looking for vulnerable services, potentially maintaining a list of public-facing services to quickly target following future vulnerability releases. The actor has also shown an aptitude for identifying development, test and orphaned services that are not well known or maintained by victim organisations.
Click to expand...

Log in or Sign up

ACSC Releases Advisory on Cyber Campaign using Copy-Paste Compromises

ronjor Global Moderator

guest Guest

Log in or Sign up

ACSC Releases Advisory on Cyber Campaign using Copy-Paste Compromises

ronjor Global Moderator

guest Guest

Useful Searches