New Wave Of Cyber Attacks Target Palestine With Political Bait And Malware

 

Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around October 2021 using politically-themed phishing emails and decoy documents.

The intrusions are part of what Cisco Talos calls a longstanding espionage and information theft campaign undertaken by the Arid Viper hacking group using a Delphi-based implant called Micropsia dating all the way back to June 2017.

The threat actor's activities, also tracked under the monikers Desert Falcon and the APT-C-23, were first documented in February 2015 by Kasperksy and subsequently in 2017, when Qihoo 360 disclosed details of cross-platform backdoors developed by the group to strike Palestinian institutions.

The Russian cybersecurity company-branded Arid Viper the "first exclusively Arabic APT group."

Then in April 2021, Meta (formerly Facebook), which pointed out the group's affiliations to the cyber arm of Hamas, said it took steps to boot the adversary off its platform for distributing mobile malware against individuals associated with pro-Fatah groups, the Palestinian government organizations, military and security personnel, and student groups within Palestine.

                                    Decoy document containing text on Palestinian reunification

The raft of new activity relies on the same tactics and document lures used by the group in 2017 and 2019, suggesting a "certain level of success" despite a lack of change in their tooling. More recent decoy files reference themes of Palestinian reunification and sustainable development in the territory that, when opened, lead to the installation of Micropsia on compromised machines.

The backdoor is designed to give the operators an unusual range of control over the infected devices, including the ability to harvest sensitive information and execute commands transmitted from a remote server, such as capturing screenshots, recording the current activity log, and downloading additional payloads.

"Arid Viper is a prime example of groups that aren't very advanced technologically, however, with specific motivations, are becoming more dangerous as they evolve over time and test their tools and procedures on their targets," researchers Asheer Malhotra and Vitor Ventura said.

"These [remote access trojans] can be used to establish long-term access into victim environments and additionally deploy more malware purposed for espionage and stealing information and credentials."

More info

1. Easy Hack Tools
2. Hacking Tools For Windows
3. Pentest Tools Apk
4. Physical Pentest Tools
5. Growth Hacker Tools
6. Pentest Box Tools Download
7. Pentest Tools Apk
8. Hacker Tools For Pc
9. Hacking Tools For Windows 7
10. Hacking Tools Kit
11. Hacking Apps
12. Hack Tools For Ubuntu
13. Pentest Tools Framework
14. Hacking Tools Github
15. Pentest Tools Alternative
16. Hack Tools
17. Kik Hack Tools
18. Pentest Tools For Ubuntu
19. What Is Hacking Tools
20. Hackrf Tools
21. Hacking Apps
22. Pentest Tools Find Subdomains
23. Hacker Tools For Ios
24. Hacker Tools For Pc
25. Pentest Tools Nmap
26. Game Hacking
27. Hacker Tools Linux
28. Hackers Toolbox
29. Nsa Hacker Tools
30. Pentest Tools For Ubuntu
31. Nsa Hack Tools
32. Hacker Techniques Tools And Incident Handling
33. New Hacker Tools
34. Pentest Tools Linux
35. Hacker Tools Windows
36. Hacker Tools 2020
37. Pentest Automation Tools
38. Termux Hacking Tools 2019
39. Hack Tools 2019
40. Best Hacking Tools 2020
41. How To Make Hacking Tools
42. Best Hacking Tools 2020
43. Best Pentesting Tools 2018
44. Hacks And Tools
45. Pentest Automation Tools
46. Hacking Tools
47. Pentest Tools Tcp Port Scanner
48. Easy Hack Tools
49. How To Install Pentest Tools In Ubuntu
50. Hacking Tools And Software
51. Hack Website Online Tool
52. Hack Tools
53. Hacking Tools Name
54. Hacker Tools Windows
55. Hack App
56. New Hack Tools
57. Hacker Security Tools
58. Pentest Tools For Ubuntu
59. Hacking Tools And Software
60. Hacking Tools Mac
61. Hack Website Online Tool
62. Hacker Tools For Pc