New Wave Of Cyber Attacks Target Palestine With Political Bait And Malware

 

Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around October 2021 using politically-themed phishing emails and decoy documents.

The intrusions are part of what Cisco Talos calls a longstanding espionage and information theft campaign undertaken by the Arid Viper hacking group using a Delphi-based implant called Micropsia dating all the way back to June 2017.

The threat actor's activities, also tracked under the monikers Desert Falcon and the APT-C-23, were first documented in February 2015 by Kasperksy and subsequently in 2017, when Qihoo 360 disclosed details of cross-platform backdoors developed by the group to strike Palestinian institutions.

The Russian cybersecurity company-branded Arid Viper the "first exclusively Arabic APT group."

Then in April 2021, Meta (formerly Facebook), which pointed out the group's affiliations to the cyber arm of Hamas, said it took steps to boot the adversary off its platform for distributing mobile malware against individuals associated with pro-Fatah groups, the Palestinian government organizations, military and security personnel, and student groups within Palestine.

                                    Decoy document containing text on Palestinian reunification

The raft of new activity relies on the same tactics and document lures used by the group in 2017 and 2019, suggesting a "certain level of success" despite a lack of change in their tooling. More recent decoy files reference themes of Palestinian reunification and sustainable development in the territory that, when opened, lead to the installation of Micropsia on compromised machines.

The backdoor is designed to give the operators an unusual range of control over the infected devices, including the ability to harvest sensitive information and execute commands transmitted from a remote server, such as capturing screenshots, recording the current activity log, and downloading additional payloads.

"Arid Viper is a prime example of groups that aren't very advanced technologically, however, with specific motivations, are becoming more dangerous as they evolve over time and test their tools and procedures on their targets," researchers Asheer Malhotra and Vitor Ventura said.

"These [remote access trojans] can be used to establish long-term access into victim environments and additionally deploy more malware purposed for espionage and stealing information and credentials."

More articles

1. Hacking Tools For Windows
2. Install Pentest Tools Ubuntu
3. Hack Tools Online
4. Hacking Tools Software
5. Best Hacking Tools 2020
6. Hacking App
7. Hack Website Online Tool
8. How To Install Pentest Tools In Ubuntu
9. New Hack Tools
10. Hacker Tools Windows
11. Pentest Tools For Android
12. Hacker Tools Hardware
13. Hacking Apps
14. Pentest Tools For Mac
15. Hacking Tools For Windows 7
16. Hack Tools Mac
17. Hacker Tools Windows
18. Pentest Tools Github
19. Hacker Tools Free Download
20. New Hacker Tools
21. Hacker Tools Online
22. Tools Used For Hacking
23. Usb Pentest Tools
24. Tools 4 Hack
25. Pentest Tools Framework
26. Underground Hacker Sites
27. Pentest Tools Port Scanner
28. Pentest Box Tools Download
29. Hack Rom Tools
30. Hacking App
31. Hack Tools Download
32. Black Hat Hacker Tools
33. Nsa Hack Tools
34. Pentest Tools Android
35. Game Hacking
36. Hack Tools Pc
37. Free Pentest Tools For Windows
38. Usb Pentest Tools
39. Pentest Tools Github
40. Install Pentest Tools Ubuntu
41. Beginner Hacker Tools
42. Hacking Tools Github
43. Hacking Tools Hardware
44. Github Hacking Tools
45. Hacker Tools Online
46. Hacking Tools Mac
47. Hacker Techniques Tools And Incident Handling
48. Hack Tools Pc
49. Hack Tools For Mac
50. What Is Hacking Tools
51. World No 1 Hacker Software
52. Hacking Tools Free Download
53. Pentest Tools Url Fuzzer
54. Hack Tools Online
55. Pentest Automation Tools
56. Hacker Tools Windows
57. Hack And Tools
58. Hacker Tool Kit
59. Hacking Tools Software
60. Hacking Tools Free Download
61. How To Make Hacking Tools
62. Hacking Tools Mac
63. Hackrf Tools
64. Pentest Tools Website Vulnerability
65. Pentest Tools Port Scanner
66. Hacking Tools Name
67. Hack Tools For Games
68. Hacking Tools Mac
69. Pentest Tools Bluekeep
70. Android Hack Tools Github
71. Hacking Tools For Mac
72. Pentest Tools Apk
73. Hacking Tools Windows 10
74. Hacker Tools For Mac
75. Hacking Tools And Software
76. Hacker Tools For Mac
77. Underground Hacker Sites
78. Hacker Tools List
79. Hacker Tools For Pc
80. Hacks And Tools
81. Hacking Tools Github
82. Pentest Tools
83. Pentest Tools