New Wave Of Cyber Attacks Target Palestine With Political Bait And Malware

 

Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around October 2021 using politically-themed phishing emails and decoy documents.

The intrusions are part of what Cisco Talos calls a longstanding espionage and information theft campaign undertaken by the Arid Viper hacking group using a Delphi-based implant called Micropsia dating all the way back to June 2017.

The threat actor's activities, also tracked under the monikers Desert Falcon and the APT-C-23, were first documented in February 2015 by Kasperksy and subsequently in 2017, when Qihoo 360 disclosed details of cross-platform backdoors developed by the group to strike Palestinian institutions.

The Russian cybersecurity company-branded Arid Viper the "first exclusively Arabic APT group."

Then in April 2021, Meta (formerly Facebook), which pointed out the group's affiliations to the cyber arm of Hamas, said it took steps to boot the adversary off its platform for distributing mobile malware against individuals associated with pro-Fatah groups, the Palestinian government organizations, military and security personnel, and student groups within Palestine.

                                    Decoy document containing text on Palestinian reunification

The raft of new activity relies on the same tactics and document lures used by the group in 2017 and 2019, suggesting a "certain level of success" despite a lack of change in their tooling. More recent decoy files reference themes of Palestinian reunification and sustainable development in the territory that, when opened, lead to the installation of Micropsia on compromised machines.

The backdoor is designed to give the operators an unusual range of control over the infected devices, including the ability to harvest sensitive information and execute commands transmitted from a remote server, such as capturing screenshots, recording the current activity log, and downloading additional payloads.

"Arid Viper is a prime example of groups that aren't very advanced technologically, however, with specific motivations, are becoming more dangerous as they evolve over time and test their tools and procedures on their targets," researchers Asheer Malhotra and Vitor Ventura said.

"These [remote access trojans] can be used to establish long-term access into victim environments and additionally deploy more malware purposed for espionage and stealing information and credentials."

More information

1. Usb Pentest Tools
2. Beginner Hacker Tools
3. Github Hacking Tools
4. Game Hacking
5. Physical Pentest Tools
6. Hacker Tools List
7. Hack Apps
8. Hacking Tools For Mac
9. Pentest Reporting Tools
10. Hack Tools Pc
11. Hacker Tools Apk Download
12. Hacker Security Tools
13. Hack And Tools
14. Usb Pentest Tools
15. Growth Hacker Tools
16. Hacker Tools Free
17. Pentest Tools Website Vulnerability
18. Hacking App
19. Hacking Tools Name
20. Hacking Tools Name
21. Pentest Reporting Tools
22. Hacker Tools List
23. Underground Hacker Sites
24. Blackhat Hacker Tools
25. Hack Tools For Windows
26. Hacker Tools
27. Hacking Tools For Games
28. Pentest Tools For Windows
29. Hacking App
30. Hacker Tools For Pc
31. Pentest Tools Bluekeep
32. Hack And Tools
33. Hacking App
34. Tools 4 Hack
35. Pentest Tools For Android
36. Android Hack Tools Github
37. Hack Tool Apk
38. Pentest Tools List
39. World No 1 Hacker Software
40. Pentest Recon Tools
41. Hacker Tools Mac
42. Hacking Apps
43. Hackrf Tools
44. How To Hack
45. How To Make Hacking Tools
46. Pentest Tools Github
47. Hack Rom Tools
48. Ethical Hacker Tools
49. Hack App
50. Hacker Tools For Mac
51. Kik Hack Tools
52. Hacker Tools For Ios
53. Bluetooth Hacking Tools Kali
54. Best Pentesting Tools 2018
55. Hacker Tools For Pc
56. Hacking Tools Name
57. Tools For Hacker
58. Hacker Tool Kit
59. Pentest Tools Find Subdomains
60. What Is Hacking Tools
61. Pentest Reporting Tools
62. Pentest Tools List
63. Hacking Tools Mac
64. New Hacker Tools
65. Pentest Reporting Tools
66. Pentest Tools
67. Hacking Tools For Windows
68. Termux Hacking Tools 2019
69. Hacker Tools
70. Pentest Tools For Windows
71. Free Pentest Tools For Windows
72. Pentest Tools Windows
73. Pentest Tools Url Fuzzer
74. Pentest Tools Website
75. Best Hacking Tools 2019
76. Pentest Tools Android
77. Wifi Hacker Tools For Windows
78. Hackers Toolbox
79. Hacking Tools For Windows 7
80. Hack And Tools
81. Hack Tool Apk
82. Free Pentest Tools For Windows
83. Hacking Apps
84. Hack Tools
85. Tools 4 Hack
86. Hacker Tools Mac
87. Hack Tool Apk No Root
88. Hack Tool Apk