New Wave Of Cyber Attacks Target Palestine With Political Bait And Malware

 

Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around October 2021 using politically-themed phishing emails and decoy documents.

The intrusions are part of what Cisco Talos calls a longstanding espionage and information theft campaign undertaken by the Arid Viper hacking group using a Delphi-based implant called Micropsia dating all the way back to June 2017.

The threat actor's activities, also tracked under the monikers Desert Falcon and the APT-C-23, were first documented in February 2015 by Kasperksy and subsequently in 2017, when Qihoo 360 disclosed details of cross-platform backdoors developed by the group to strike Palestinian institutions.

The Russian cybersecurity company-branded Arid Viper the "first exclusively Arabic APT group."

Then in April 2021, Meta (formerly Facebook), which pointed out the group's affiliations to the cyber arm of Hamas, said it took steps to boot the adversary off its platform for distributing mobile malware against individuals associated with pro-Fatah groups, the Palestinian government organizations, military and security personnel, and student groups within Palestine.

                                    Decoy document containing text on Palestinian reunification

The raft of new activity relies on the same tactics and document lures used by the group in 2017 and 2019, suggesting a "certain level of success" despite a lack of change in their tooling. More recent decoy files reference themes of Palestinian reunification and sustainable development in the territory that, when opened, lead to the installation of Micropsia on compromised machines.

The backdoor is designed to give the operators an unusual range of control over the infected devices, including the ability to harvest sensitive information and execute commands transmitted from a remote server, such as capturing screenshots, recording the current activity log, and downloading additional payloads.

"Arid Viper is a prime example of groups that aren't very advanced technologically, however, with specific motivations, are becoming more dangerous as they evolve over time and test their tools and procedures on their targets," researchers Asheer Malhotra and Vitor Ventura said.

"These [remote access trojans] can be used to establish long-term access into victim environments and additionally deploy more malware purposed for espionage and stealing information and credentials."

Related news

1. Install Pentest Tools Ubuntu
2. Android Hack Tools Github
3. Pentest Tools Alternative
4. Hacking Tools Kit
5. Hack Website Online Tool
6. Hacking Tools Name
7. Pentest Reporting Tools
8. Hacker Tools Apk
9. What Are Hacking Tools
10. Hacking Tools Windows
11. Wifi Hacker Tools For Windows
12. Pentest Tools Download
13. Hack Tools For Mac
14. Hacker Tools 2020
15. Hacker Tools Online
16. Hack Tools Mac
17. Hacker Tools Mac
18. Nsa Hack Tools
19. World No 1 Hacker Software
20. Underground Hacker Sites
21. Hacking Tools For Games
22. Pentest Tools Alternative
23. Hacking Tools Pc
24. Ethical Hacker Tools
25. Hacking Tools Usb
26. Hacker Tools Free Download
27. Hacking Tools Kit
28. Pentest Tools Open Source
29. Hacking Tools Usb
30. Hacker Tools Github
31. Physical Pentest Tools
32. Hack Tools For Pc
33. Hacking Tools For Mac
34. Hacking Tools Windows
35. Usb Pentest Tools
36. Pentest Tools Subdomain
37. Best Hacking Tools 2020
38. Pentest Tools Open Source
39. Pentest Tools Download
40. Tools Used For Hacking
41. Hack Tools
42. Hacking Tools
43. Pentest Tools Subdomain
44. Hacking Tools Name
45. Pentest Tools Windows
46. Pentest Tools For Android
47. Kik Hack Tools
48. Pentest Recon Tools
49. Android Hack Tools Github
50. Hacking Tools For Kali Linux
51. Pentest Tools Windows
52. Hacker Techniques Tools And Incident Handling
53. Termux Hacking Tools 2019
54. Hack Website Online Tool
55. Pentest Tools Website
56. Hack Tools Online
57. Hacker Tool Kit
58. Pentest Tools Subdomain
59. Hacker Tools For Mac
60. Black Hat Hacker Tools
61. Tools Used For Hacking
62. Pentest Tools Github
63. Hacker Tools Linux
64. Hacking Tools For Pc
65. Hacking Apps
66. Hack Tools For Games