[ad_1]
The activities of what is called advanced electronic threats (APTs), which took place in the second quarter of 2019, included a number of targeted or originating operations from the Middle East and the Middle East. South Korea. The bulk of the activity was focused on electronic espionage or financial gains, but at least one campaign appeared to be aimed at spreading misleading information. In May, Kaspersky researchers badyzed leaks of what appeared to be party-owned property via electronic espionage and concluded that the underlying subversion was probably Hades, the group also badociated with ExPetr and the cyberattack. Celebrated at the 2018 Winter Olympics.
These and other trends in the world have been badyzed in Kaspersky's latest quarterly update on cyber threats.
Russian-speaking groups continue to improve their destruction tools and are constantly launching new tools and new operations. Since March, for example, Zebrocy seems to have turned its attention to events in India and Pakistan, with officials and diplomats from both countries, while maintaining its continued access to local and distant government networks in Central Asian countries. Turla also continued to create and use a rapidly evolving toolbox as part of its operations and attacks, including a clear removal of OilRig infrastructure.
Outstanding operations include a Lazarus group attack on a mobile gaming company in South Korea and a Lazarus BlueNoroff campaign targeting a bank in Bangladesh and digital currency software software.
The researchers also noted an active campaign targeting Central Asian country government agencies from the Chinese language group SixLittleMonkeys, using a new version of the Trojans Microcin and HawkEye.
Kaspersky's researchers recommended taking the following steps to avoid unknown or unknown subversive attacks, including giving the company's security operations center access to the latest information on threats in order to keep abad of new and emerging tools, tactics and tactics used by cybercriminals and cybercriminals. With the implementation of EDR solutions such as Kaspersky Endpoint Detection and Response, to detect, investigate and manage network threats and systems in a timely manner, as well as the adoption of endpoint protection, it is important to implement an enterprise-level security solution to detect advanced threats on networks at an early stage, Kaspersky Anti targeted attack platform.
In addition, it is important to train staff to raise awareness of security and practical skills via Kaspersky's automated security awareness platform, for example, by launching numerous phishing attacks or other social engineering techniques.
Interest Pine
Google +
What is App
Source link