Credential Harvesting Campaign Targets Government Procurement Services

guest · Dec 14, 2019

Credential Harvesting Campaign Targets Government Procurement Services
December 13, 2019
https://www.securityweek.com/credential-harvesting-campaign-targets-government-procurement-services

Multiple public and private sector organizations use procurement services targeted in this campaign, which spoofed sites for multiple international government departments, email services, and two courier services.
The attackers sent phishing emails to trick intended victims into accessing spoof phishing sites that masqueraded as legitimate login pages relevant to government agencies.

Anomali published an extensive report (PDF) detailing the campaign, but refrains from making an attribution.
Anomali’s security researchers discovered a total of 62 domains and approximately 122 phishing sites. The sites use Domain Validation (DV) certificates issued by “cPanel, Inc,” with subdomains that contain a secure, verification, bidding or delivery theme.

“The focus on these services suggests the attacker is interested in those organizations (private and public) that may be a potential contractor or supplier for those governments targeted. The purpose of this insight could be a financial incentive to out compete a rival bidder, or more long term insight regarding the trust relationship between the potential supplier and the government in question,” Anomali says.
Click to expand...

Anomali: Phishing Campaign Targets Login Credentials of Multiple US, International Government Procurement Services

Log in or Sign up

Credential Harvesting Campaign Targets Government Procurement Services

guest Guest

Log in or Sign up

Credential Harvesting Campaign Targets Government Procurement Services

guest Guest

Useful Searches