Phishing & fraudhigh
Nigerian phishing: Industrial companies under attack
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2015-1641 | Memory Corruption RCE in Microsoft Office via Malicious RTF Files | — | 97% | KEV | — KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | lt.com | **quil-ar.com hi***quil.com.ar em***uae.com em***u.ae lus***lt.com lus***lt.pt Phishing domain names mimicking legitimate doma |
| domain | quil-ar.com | level domain. Malware CnC Real industrial company site hi***quil-ar.com hi***quil.com.ar em***uae.com em***u.ae lus***lt.com lus*** |
| domain | uae.com | ustrial company site hi***quil-ar.com hi***quil.com.ar em***uae.com em***u.ae lus***lt.com lus***lt.pt Phishing domain names mi |
From the original article
13 min read at securelist.com
In late 2016, the Kaspersky Lab Industrial Control Systems Cyber Emergency Response Team ( Kaspersky Lab ICS CERT ) reported on phishing attacks that were primarily targeting industrial companies from the metallurgy, electric power, construction, engineering and other sectors. As further research demonstrated, this was just part of a bigger story that began much earlier and is unlikely to end any time soon.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.