One Article Review
| Source |  TrendLabs Security |
|---|---|
| Identifiant | 684 |
| Date de publication | 2016-04-21 10:23:44 (vue: 2016-04-21 10:23:44) |
| Titre | Looking Into a Cyber-Attack Facilitator in the Netherlands |
| Texte | A small webhosting provider with servers in the Netherlands and Romania has been a hotbed of targeted attacks and advanced persistent threats (APT) since early 2015. Starting from May 2015 till today we counted over 100 serious APT incidents that originated from servers of this small provider. Pawn Storm used the servers for at least 80 high profile attacks against various governments in the US, Europe, Asia, and the Middle East. Formally the Virtual Private Server (VPS) hosting company is registered in Dubai, United Arab Emirates (UAE). But from public postings on the Internet, it is apparent that the owner doesn't really care about laws in UAE. In fact, Pawn Storm and another APT group, attacked the government of UAE using servers of the VPS provider through highly targeted credential phishing. Other threat actors like DustySky (also known as the Gaza hackers) are also regularly using the VPS provider to host their Command and Control (C&C) servers and to send spear phishing e-mails.Post from: Trendlabs Security Intelligence Blog - by Trend MicroLooking Into a Cyber-Attack Facilitator in the Netherlands |
| Envoyé | Oui |
| Condensat | 100 2015 about actors advanced against also another apparent apt arab are asia attack attacked attacks been blog but c&c care command company control counted credential cyber doesn dubai dustysky early east emirates europe facilitator fact formally from from: gaza government governments group hackers has high highly host hosting hotbed incidents intelligence internet known laws least like looking mails may microlooking middle netherlands originated other over owner pawn persistent phishing post postings private profile provider public really registered regularly romania security send serious server servers since small spear starting storm targeted threat threats through till today trend trendlabs uae united used using various virtual vps webhosting |
| Tags | |
| Stories | APT 28 |
| Notes | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.