Report: Lazarus Group has large-scale Covid-19 phishing campaign in the works
Friday, June 19, 2020
The researchers said that while they hadn’t seen phishing or impersonated sites defined in the templates, their research indicates the hackers will set that up during the next 24 hours.
While large-scale phishing campaigns are an everyday occurrence and lists of emails are available on the dark web for bitcoin, Ilia Kolochenko, founder and CEO at ImmuniWeb, cast doubt on the supposed Lazarus campaign, saying it was more likely the work of script kiddies rather than a nation-state actor.
“Professional cybercriminals will unlikely discuss their upcoming hacking campaigns in a visible manner unless they aim to build a smoke screen a raise a false alert,” said Kolochenko. “Moreover, targeting enterprises with COVID-19 today borders to absurd, virtually all organizations now have internal memos or policies saying to distrust all and any COVID-19 related communications from any source.” Read Full Article
Dark Reading: Cisco Patches Flaw in Webex Videoconferencing App
CPO Magazine: REvil Ransomware’s Stolen Data Auction Sets Precarious Precedent Amid Pandemic