Malware-infected documents found on the Kazakhstan government’s portal

guest · Jul 13, 2021

Malware-infected documents found on the Kazakhstan government’s portal
July 13, 2021
https://therecord.media/malware-infected-documents-found-on-kazakhstan-government-portals/

The official website of the Kazakhstan government has hosted documents infected with malware for more than five months, since January this year.

In a report published last week, T&T Security and Zerde Holding, two local security firms, said they identified at least two documents uploaded on the government’s legal and budget-related sections that were installing a version of the Razy malware on users’ systems.

The two files (listed below) were made available via eGov.kz, the Kazakhstan government official portal, where citizens can register to file taxes, interact with various government agencies, and download official documents.
Click to expand...

While the first thought would be that a foreign cyber-espionage group organized a clever watering hole attack to go after targets of interest working for the Kazakhstan government or sensitive business sectors, this does not appear to be the case.

In an interview with The Record earlier today, Matthieu Faou, a malware researcher for Slovak antivirus maker ESET, echoed this assumption.

“So far, I think it is not a targeted campaign,” he said.
Click to expand...

Log in or Sign up

Malware-infected documents found on the Kazakhstan government’s portal

guest Guest

Log in or Sign up

Malware-infected documents found on the Kazakhstan government’s portal

guest Guest

Useful Searches