Kasperskys global research and analysis team - Latest News Update, Information, Photos & Videos on Kasperskys global research and analysis team at Lokmat Times

Washington D.C.[USA], Mar 27 : Earlier in March, Trend Micro published research on a watering-hole campaign targeting users in Southeast Asia with powerful spyware called LightSpy. Following that research, Kaspersky's Global Research and Analysis Team shared some important additional details on this attack targeting mobile users through links on various forums and communications channels.In their research, published on Securelist.com, Kaspersky provides an analysis of:- The surveillance framework's deployment timeline starting from January 2020 - Previously unknown samples of the LightSpy Android implants- Traces of implants targeting Windows, Mac and Linux based computers along with Linux-based routers- New indicators of compromise and some other details about the attackWhat is known about the LightSpy attacks?Actors behind the campaign distribute links to malicious websites mimicking the original ones that are likely to be frequented by potential victims. Once a target visits the weaponized website, a custom exploit chain tries to execute a shellcode, which leads to the deployment of the full original malware on the victim's phone.Landing page of watering hole siteThe malware is successfully targeting iPhones running versions of iOS up to version 12.2. Users running the latest version of iOS, 13.4, should be safe from these exploits. Users of Android OS-based devices are also in the crosshairs - researchers found several versions of the implant that target this platform. In addition, Kaspersky researchers identified some indicators of the existence of malware targeting Mac, Linux and Windows-based computers, along with Linux-based routers.The research also discovered the malware is being spread through forum posts and replies, as well as popular communications platforms by posting links to the deployed landing pages. Once the website has been visited, the malware jailbreaks the victim's device, giving the attackers the ability to record calls and audio, read certain messengers and more.The information currently available does not make it possible to attribute the operation to any known advanced persistence threat actor (APT), which is why Kaspersky has temporarily dubbed the attackers "TwoSail Junk"."We tracked this particular framework and infrastructure beginning in January this year. It is an interesting example of an agile approach to developing and deploying surveillance framework in Southeast Asia. This innovative strategy is something we have seen before from SpringDragon, and LightSpy's targeting geolocation falls within the previous regional targeting of the SpringDragon/LotusBlossom/Billbug APT, as does the infrastructure and "evora" backdoor use. Although the campaign peaked in February - that is when we saw the highest growth of links leading to the malicious site - it is still active and we continue monitoring it," comments Alexey Firsh, a security researcher at Kaspersky's Global Research and Analysis Team.To avoid falling victim to waterholing and other targeted attacks such as this, Kaspersky recommends the following:Try to avoid suspicious links promising exclusive content, especially if they are shared on social media. Refer to official sources for trustworthy and legitimate information.Check the website's authenticity. Do not visit websites until you are sure that they are legitimate and start with 'https'. Confirm that the website is genuine, by double-checking the format of the URL or the spelling of the company name, reading reviews about it and checking the domain's registration data.Choose a reliable security solution such as Kaspersky Security Cloud for effective personal protection against known and unknown threats.( With inputs from ANI )

Home

City

Latest News

Cricket

LT Premium

National

International

Maharashtra

Opinions

Chhatrapati Sambhajinagar

Nagpur

Entertainment

Photos

Business

Technology

Sports

Lifestyle

Social Viral

Lokmat Games

Health

Lok Sabha Election 2024

Heatwave In India

Mumbai Water Cut

Maharashtra Lok Sabha Election

IPL 2024

Salman Khan

Kasperskys Global Research And Analysis TeamFOLLOW

Kasperskys global research and analysis team, Latest News

Technology :Hackers prey on devices running open-source Linux OS

New Delhi, Sep 12 As organisations opt to use open-source operating systems worldwide, cybersecurity researchers have warned that ... ...

Technology :New campaign to distribute malicious Trojan uncovered

Security researchers at cybersecurity firm Kaspersky have uncovered a targeted campaign to distribute Milum a malicious Trojan that gains remote control of devices in various organisations, including those representing the industrial sector. ...

Technology :This spyware targeting mobile users in Southeast Asia

Actors behind the 'LightSpy' spyware campaign targeting users in Southeast Asia distribute links to malicious websites, mimicking the original ones that are likely to be frequented by potential victims, researchers from cybersecurity firm Kaspersky s ...

:Kaspersky shares new details about watering-hole attacks targeting mobile users in Southeast Asia

Earlier in March, Trend Micro published research on a watering hole campaign targeting users in Southeast Asia with powerful spyware called LightSpy. Following that research, Kaspersky's Global Research and Analysis Team shared some important additio ...