Moscow hackers take aim at former Soviet embassies



A huge cyber-attack has been carried out across more than 15 countries, with the hackers targeting former soviet embassies across the globe.

Embassies in France, Ukraine, China, Poland and others have all been hit by hackers, though the specific state embassies targeted remain undisclosed at the time of writing.

Security researchers at Symantec discovered the attacks, and have claimed the hackers may be backed by a nation state.

Related: IBM and Symantec beef up security offerings

According to Symantec, the known malware (called Wipbot and Tavdig) was planted in these embassies to enable the hackers to carry out reconnaissance work and, most worryingly, find human targets.

Read more: Russia toys with idea of a country-wide controlled, private Internet

The firm believes this malware was planted on websites often visited by embassy staff – a technique known as a watering hole attack that ensures maximum throughput.

It's claimed that if high-profile targets were unearthed by hackers using Wipbot and Tavdig, more complex malware would then be applied (namely Turla, Uroboros, Snake and Carbon.)

Related: Homeland Security warns of malicious POS software

Most minds would likely jump to the US as the mysterious nation state behind the attack, however intriguingly the source of the hacking has been traced back to the UTC +4 timezone, which includes Moscow.

"In one instance, the malware delivered was disguised as a Shockwave installer bundle," said a Symnatec researcher in a statement. ""Wipbot was then used to gather further information about the infected computer."

"If the attackers deemed the victim of interest, it appears likely that a second back door trojan with far greater capabilities was downloaded on to the victim's computer."




More

How do you print to an HP 4000 series printer without a parallel port?

These days parallel ports on laptops are disapearing. So how do you connect to that legacy HP 4000 printer if you don't have a parallel port?

RSA Conference: Is hiring hackers a new thing?

Once considered outlaws and trouble makers, hackers are now actively sought for employment by leading intelligence and law enforcement agencies

10 Ways Your Small Business Can Cut IT Costs Without Cutting Value (Part 2)

In the second of this two part series we talk about more cost-saving techniques you can employ to bring your overall IT costs down.