Industrial espionage was one of the possible objectives of the campaign. It collected VPN connection data, logged keypresses, captured screenshots and videos of the screen, recorded sound with the microphone and stole clipboard data and operating system event log data. In 2021, Kaspersky experts identified the PseudoManuscrypt spyware module targeting many industrial and government organizations. Spyware is used for espionage – to collect banking card credentials, passwords and other valuable data. Spyware can be installed on any device – desktops or laptops, servers and mobile devices and masked as regular apps for unnoticed operation. The collected information is then transmitted to the malicious user controlling the spyware through email, the web and other methods. Spyware is a type of malware that is used to spy on a user’s actions (to track data entered by keyboard, make screen shots, retrieve a list of running applications, etc.). It is common that spyware can lead to loss of some corporate data from a device of one of the employees, but it is far more likely that the compromised employee will be used as an entry-point into the corporate network, which contains more information,” comments Emad Haffar, Head of Technical Experts, META region at Kaspersky. It is often used in a targeted manner, with corporate networks getting infiltrated for information collection. “Spyware remains one of the most popular types of malware, enabling corporate espionage or intellectual property theft. However, security operations centers in organizations remain on alert with various cybercriminal groups continuing their activity across regions. According to Kaspersky Security Network data for corporate users in the Middle East, in Q2 2022 the number of users affected by Trojan Spies – spyware able to secretly harvest victim’s credentials – decreased compared to the previous quarter.
0 Comments
Leave a Reply. |