A naukri.com initiative
Cybersecurity-Insiders
1d
142
Image Credit: Cybersecurity-Insiders
Lazarus launches malware on Nuclear power org and Kaspersky Telegram Phishing scams
- The Lazarus Group, funded by the North Korean government, is targeting employees within nuclear power organizations and critical infrastructure sectors through highly advanced malware campaigns, facilitating data theft, espionage, and ransomware infections.
- The hackers use phishing emails disguised as career opportunities or industry-specific announcements and execute the malware on the victim's system upon a click or download of the attachment.
- Lazarus Group is primarily focusing on nuclear organizations and energy firms in the USA, UK, Canada, and Australia that handle sensitive information, working as high-potential targets.
- The malware campaign, dubbed 'Operation DreamJob,' is named for the way the Lazarus Group cleverly uses job-related phishing tactics to exploit human behaviors like curiosity and professional ambition.
- While the Lazarus Group's activities are currently limited to specific regions, namely the UK, USA, Canada, and Australia, the risk of these attacks spreading to other countries is high.
- Kaspersky, the Russian cybersecurity firm, warns of Telegram phishing scams that offer discounted Telegram Premium services to trick users into clicking malicious links, leading to data theft, malware infections, and unauthorized payload downloads.
- Experts recommend carefully verifying links and obtaining Premium services only through the official Telegram website, avoiding third-party offers and discount coupons that may be scams.
- Organizations must strengthen their defenses through robust technical defenses and employee education to reduce human error, the weakest link in the security chain.
- State-sponsored hacking groups play an increasing role in the global cybersecurity landscape, calling for public-private collaboration to safeguard critical infrastructure from these persistent threats.
- Vigilance is key to early detection systems to prevent these types of attacks.
Read Full Article
8 Likes
For uninterrupted reading, download the app