Hi All, I published a blog post today on an Cyber Espionage (APT) attack targeting Indian Investigation Agency "Central Bureau of Investigation (CBI)" and Possibly Indian Army officials to steal, spy or to take control of their systems. In order to infect the victims the attackers impersonated the identity of Indian think tank to distribute spear-phishing emails which dropped a malware capable of spying on infected systems. Below is the link to the blog post (containing full technical details of stealth techniques used by the attackers) and indicators. The indicators are provided so that the organizations can use the indicators to detect, investigate this attack campaign and remediate infected systems. We also reported this attack to the concerned teams. Hope you will like it.cheers
Below is the link to the blog post and indicators https://cysinfo.com/cyber-attack-targeting-cbi-and-possibly- indian-army-officials/ Thanks, Monnappa @monnappa22 -- You received this message because you are subscribed to the Google Groups "NFORCEIT" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send an email to [email protected]. Visit this group at https://groups.google.com/group/nforceit. For more options, visit https://groups.google.com/d/optout.
