Large phishing campaign targets EMEA and APAC governments

guest · Sep 21, 2021

Large phishing campaign targets EMEA and APAC governments
Security researchers uncovered a large phishing campaign targeting multiple government departments in APAC and EMEA countries.
September 20, 2021
https://securityaffairs.co/wordpress/122401/hacking/phishing-emea-apac-governments.html

Researchers from cybersecurity firm Cyjax uncovered a large phishing campaign targeting multiple government departments in APAC and EMEA countries.

The phishing campaign has been ongoing since spring 2020 when the domains were first transferred to their current host. At the time of discovery, experts noticed that 15 phishing pages were still active and targeting the governments of Kyrgyzstan, Belarus, Georgia, Turkmenistan, Ukraine, Uzbekistan, and Pakistan.

“The domains in this campaign typically began with “mail.” and often contained the targeted government department’s real domain in full as a hostname on the attacker’s domain. Only five domains were registered by the attackers in this campaign: either through Tucows or PublicDomainRegistry; using either OVH SAS or VDSINA to host the sites.” reads the analysis published by the experts.
Click to expand...

The phishing pages were crafted to appear legitimate sites of various ministries within the targeted country’s governments, including departments of energy, finance, and foreign affairs.

The nature of the target and the attackers’ TTPs suggest that the phishing campaign was orchestrated by a nation-state threat actor.
Click to expand...

Cyjax: EMEA and APAC governments targeted in widespread credential harvesting campaign

Cyjax analysts have uncovered a large credential harvesting campaign targeting multiple government departments in APAC and EMEA countries. Over 50 hostnames were analysed, many of which were posing as the Ministry of Foreign Affairs, Ministry of Finance, or Ministry of Energy, in various countries such as Uzbekistan, Belarus, and Turkey; as well as the Main Intelligence Directorate of Ukraine and the Pakistan Navy. IOCs for this campaign can be found at the bottom of this blog.
Click to expand...

Log in or Sign up

Large phishing campaign targets EMEA and APAC governments

guest Guest

Log in or Sign up

Large phishing campaign targets EMEA and APAC governments

guest Guest

Useful Searches