Situational Awareness Report – SAR‐2013‐029 October 31, 2013 Known Threat Actors Using Halloween Themes in Spear Phishing Attacks Overview: (U//FOUO) Since at least 21 October 2013, Department of Defense (DoD) personnel have been targeted via their personal webmail accounts by known cyber espionage actors [1,2,3,4]. The most recent exploitation efforts have used predominantly Halloween themes to entice users to fall prey to these socially engineered attacks. These attacks are designed to install malicious software on victim computers to steal sensitive information. Although not optimal, when users open these emails from a DoD system there is a high level of confidence and fidelity for the security posture in defense of these attacks. When users open these malicious emails from home systems however, the security posture is unknown. PENTCIRT recommends caution when utilizing commercial email solutions and users should practice operational security due to personal email being targeted by sophisticated actors. (U//FOUO) PENTCIRT has identified the following addresses as being used by these actors to target personal webmail accounts [1,2,3,4]: admin[@]one.yahoo‐email adamskuo[@]mail.ru harrisonlee[@]mail.ru twdfanclubs[@]aol z_dylan[@]aol hawaiiairlines[@]yahoo young_lady2010[@]yahoo danielroy07[@]outlook clarkr35[@]yahoo cindy1800[@]outlook
Posted on: Thu, 31 Oct 2013 19:20:12 +0000
Trending Topics
Recently Viewed Topics
© 2015