CryptoPolyTech.com
Crypto, Politics, Tech, Gaming & World News.

Russia, Moldova targeted by obscure hacking group in new cyberespionage campaign | CPT PPP Coverage

 | cutline • press clip • news of the day |

Cryptopolytech (CPT) Public Press Pass (PPP)
News of the Day COVERAGE

200000048 – World Newser
•| #World |•| #Online |•| #Media |•| #Outlet |

View more Headlines & Breaking News here, as covered by cryptopolytech.com


Russia, Moldova targeted by obscure hacking group in new cyberespionage campaign appeared on therecord.media by therecord.media.

A cyberespionage group known as XDSpy recently targeted victims in Russia and Moldova with a new malware variant, researchers have found.

In a campaign earlier this month, the suspected nation state-linked group sent phishing emails to targets in Russia, including a tech company that develops software for cash registers, as well as to an unidentified organization in Transnistria, the Russian-controlled breakaway region in Moldova.

The malicious emails, discovered by Russian cybersecurity firm F.A.C.C.T., contained a link to an archive with a legitimate executable file, which allowed attackers to run malicious code without raising suspicion.

During these attacks, the hackers used a previously unknown tool, which the researchers called XDSpy.DSDownloader. F.A.C.C.T. didn’t disclose whether the hackers managed to penetrate the victims’ systems and steal data.

XDSpy is believed to be a state-controlled threat actor, active since 2011, that primarily attacks countries in Eastern Europe and the Balkans. Despite the group’s long history, researchers have been unable to identify the country backing it.

Most of XDSpy’s targets are related to the military, finance, energy, research and mining industries in Russia, according to F.A.C.C.T.

Earlier in December, the group targeted a Russian metallurgical enterprise and a research institute involved in the development and production of guided missile weapons. In an attack last July, the hackers sent phishing letters with malicious PDF attachments to an unnamed but “well-known” research institute.

XDSpy doesn’t operate a particularly sophisticated toolkit, but “they have very decent operational security,” researchers at cybersecurity firm ESET told Recorded Future News in a previous interview.

“They are putting quite a lot of effort into the obfuscation of their implants in order to try to evade security solutions. As such, it is likely they have a decent percentage of success, even if we have been able to track their operations in the long run,” ESET said.

Get more insights with the

Recorded Future

Intelligence Cloud.

Learn more.

FEATURED ‘News of the Day’, as reported by public domain newswires.

Find more, like the above, right here on Cryptopolytech.com by following our extensive quiclick links appearing on images or [NEWSer CHEWSer].
View ALL Headlines & Breaking News here.

Source Information (if available)

This article originally appeared on therecord.media by therecord.media – sharing via newswires in the public domain, repeatedly. News articles have become eerily similar to manufacturer descriptions.

We will happily entertain any content removal requests, simply reach out to us. In the interim, please perform due diligence and place any content you deem “privileged” behind a subscription and/or paywall.

CPT (CryptoPolyTech) PPP (Public Press Pass) Coverage features stories and headlines you may not otherwise see due to the manipulation of mass media.

We compile ‘news of the day’ content in an unbiased manner and contextually classify it to promote the growth of knowledge by sharing it just like Russia, Moldova targeted by obscure hacking group in new cyberespionage campaign

First to share? If share image does not populate, please close the share box & re-open or reload page to load the image, Thanks!

You might also like
Leave a comment