Industrial Cyber-Espionage Campaign Targets Hundreds of Companies

guest · Dec 17, 2019

Industrial Cyber-Espionage Campaign Targets Hundreds of Companies
December 17, 2019
https://www.bleepingcomputer.com/ne...onage-campaign-targets-hundreds-of-companies/

Victims in multiple countries
Dubbed Gangnam Industrial Style, the campaign compromised at least 200 systems. Almost 60% of the victims are in South Korea, including steel, pipes, and valves, manufacturers, an engineering company, and a chemical plant construction company.
Industrial-themed phishing
The malicious emails from the attacker are specifically created for the recipient. In one of them, the sender posed as an employee of a Siemens subsidiary making a request for quote (RFQ) for designing a power plant in the Czech Republic.
The message included a diagram and a publicly available technical paper on how to run the plant on fuel gas.
Click to expand...

A new breed of Separ malware
CyberX security researchers analyzing the malware used in the Gangnam Industrial Style campaign noticed is the Separ info-stealer, publicly documented for the first time in 2013.

In a report today, CyberX notes that the malware relies on the Autorun feature to survive system reboots and comes with a host of mostly freely available tools: [...]
The researchers say that the Gangnam Industrial Style campaign is still active because they are seeing stolen credentials still being delivered to the attacker's command and control server.
Click to expand...

CyberX: Gangnam Industrial Style: APT Campaign Targets Korean Industrial Companies

Log in or Sign up

Industrial Cyber-Espionage Campaign Targets Hundreds of Companies

guest Guest

Log in or Sign up

Industrial Cyber-Espionage Campaign Targets Hundreds of Companies

guest Guest

Useful Searches