New Wave Of Cyber Attacks Target Palestine With Political Bait And Malware

 

Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around October 2021 using politically-themed phishing emails and decoy documents.

The intrusions are part of what Cisco Talos calls a longstanding espionage and information theft campaign undertaken by the Arid Viper hacking group using a Delphi-based implant called Micropsia dating all the way back to June 2017.

The threat actor's activities, also tracked under the monikers Desert Falcon and the APT-C-23, were first documented in February 2015 by Kasperksy and subsequently in 2017, when Qihoo 360 disclosed details of cross-platform backdoors developed by the group to strike Palestinian institutions.

The Russian cybersecurity company-branded Arid Viper the "first exclusively Arabic APT group."

Then in April 2021, Meta (formerly Facebook), which pointed out the group's affiliations to the cyber arm of Hamas, said it took steps to boot the adversary off its platform for distributing mobile malware against individuals associated with pro-Fatah groups, the Palestinian government organizations, military and security personnel, and student groups within Palestine.

                                    Decoy document containing text on Palestinian reunification

The raft of new activity relies on the same tactics and document lures used by the group in 2017 and 2019, suggesting a "certain level of success" despite a lack of change in their tooling. More recent decoy files reference themes of Palestinian reunification and sustainable development in the territory that, when opened, lead to the installation of Micropsia on compromised machines.

The backdoor is designed to give the operators an unusual range of control over the infected devices, including the ability to harvest sensitive information and execute commands transmitted from a remote server, such as capturing screenshots, recording the current activity log, and downloading additional payloads.

"Arid Viper is a prime example of groups that aren't very advanced technologically, however, with specific motivations, are becoming more dangerous as they evolve over time and test their tools and procedures on their targets," researchers Asheer Malhotra and Vitor Ventura said.

"These [remote access trojans] can be used to establish long-term access into victim environments and additionally deploy more malware purposed for espionage and stealing information and credentials."

Continue reading

1. Hacking Tools For Pc
2. Game Hacking
3. Hack Tools For Windows
4. Computer Hacker
5. Hacker Tools Github
6. Physical Pentest Tools
7. Wifi Hacker Tools For Windows
8. Hacking Tools 2019
9. Hack Tools Download
10. Hacker Tools Github
11. Wifi Hacker Tools For Windows
12. New Hacker Tools
13. Hacking Tools For Windows
14. Hacker
15. Black Hat Hacker Tools
16. Hacking Tools Download
17. Hack Tools Download
18. Hacker Hardware Tools
19. Hack Tools
20. Pentest Tools Subdomain
21. Install Pentest Tools Ubuntu
22. Tools 4 Hack
23. Install Pentest Tools Ubuntu
24. Pentest Box Tools Download
25. Free Pentest Tools For Windows
26. Pentest Tools List
27. Pentest Tools Linux
28. Pentest Tools Free
29. Hacker Tools For Mac
30. Hacker Tools
31. Hacking Tools For Windows 7
32. Pentest Automation Tools
33. Pentest Tools Apk
34. Hack Tools For Windows
35. What Are Hacking Tools
36. Hacker Tools Linux
37. Hack Tools 2019
38. Hack Tool Apk
39. Hacking Apps
40. Tools Used For Hacking
41. Hack Tools For Windows
42. Hacking Tools 2020
43. Hacking Tools For Kali Linux
44. Hacking Tools
45. Hacker Tools Free
46. Hacker
47. Hackrf Tools
48. Hacker
49. Pentest Tools Review
50. Pentest Tools For Mac
51. Hack Rom Tools
52. Pentest Reporting Tools
53. What Is Hacking Tools
54. Hack Tools For Windows
55. Ethical Hacker Tools
56. Install Pentest Tools Ubuntu
57. Hacker Tools 2020
58. Hacking App
59. Hacking Tools Windows 10
60. Beginner Hacker Tools
61. Pentest Tools Url Fuzzer
62. Hack Apps