'Greenbug' hacking group hits three telecom firms in Pakistan

guest · May 19, 2020

'Greenbug' hacking group hits three telecom firms in Pakistan
May 19, 2020
https://www.cyberscoop.com/greenbug-symantec-iran-hacking-pakistan/

For the past several months, suspected Iranian hackers have been rooting around the IT systems of at least three telecommunications companies in Pakistan, accessing data servers when it suits them, according to cybersecurity company Symantec.

The report, published Tuesday, points the finger at a group called Greenbug, which used virtual “tunnels” to quietly stay connected to victim machines. The telecom data offered a trove of information to spy on targets in Pakistan, and the hackers were determined to access the companies’ networks.

“As we would close one door, they would attempt to come back through another,” said Jon DiMaggio, senior cyberthreat analyst at the Symantec Enterprise Division, recalling Greenbug’s drive to stay on the Pakistani telecom companies’ networks after being discovered.
While U.S. telecom giants like AT&T and Verizon can invest heavily in countering such hacking threats, not all telecom providers around the world have the same resources.
Click to expand...

Symantec: Sophisticated Espionage Group Turns Attention to Telecom Providers in South Asia

The Greenbug espionage group is actively targeting telecommunications companies in South Asia, with activity seen as recently as April 2020.
There are indications that at least one of the companies was first targeted as early as April 2019.

Email appears to be the initial infection vector used by the group. Greenbug is using a mixture of off-the-shelf tools and living-off-the-land techniques in these attacks.

Much of the activity we saw in this attack campaign is in line with activity we have seen from Greenbug in the past, including the use of email as an initial infection vector, the use of publicly available hack tools like Mimikatz and Plink, and the apparent focus on collecting credentials and maintaining a persistent, low-profile presence on victim networks.
Click to expand...

Log in or Sign up

'Greenbug' hacking group hits three telecom firms in Pakistan

guest Guest

Log in or Sign up

'Greenbug' hacking group hits three telecom firms in Pakistan

guest Guest

Useful Searches