Express Computer
Home  »  News  »  Malicious spam targeting India’s manufacturing, export detected

Malicious spam targeting India’s manufacturing, export detected

0 56
Read Article

A new MalSpam, or malicious spam campaign is now targeting manufacturing and export sectors in India, Seqrite, the enterprise arm of Pune-based IT security firm Quick Heal Technologies, warned.

The attackers generally use publicly available file hosting services such as Pastebin and Bitly to host their payloads to hide behind legitimate services that remain undetected, said researchers at Seqrite.

The attack begins in the form of a phishing email sent to a genuine user.

This contains MS Office PowerPoint files with a malicious Visual Basic for Applications (VBA) macro.

Cybercriminals use VBA programming in Microsoft Office macros as a medium to spread viruses, worms, and other forms of malware on a computer system.

Post execution, the malware takes advantage of pre-existing legitimate software to download malicious payload from Pastebin and continues to spread the infection.

According to Seqrite, some of the common Remote-Access-Tools used by attackers are Agent Tesla, Remcos RAT and NanoCore RAT.

Following the tracks of these campaigns since April, the researchers have found that attackers do not restrict themselves to a single geography or vertical.

They also noticed that similar campaigns existed earlier as well that targeted varied organisations including those managed by the government.

The timely detection and blocking of such attack campaigns is essential for maintaining the integrity and trust in the businesses.

Seqrite recommended users to exercise ample caution and avoid opening attachments and clicking on web links in unsolicited emails.

Businesses should consider disabling macros, keep their Operating Systems updated and have a full-fledged security solution installed on all the devices, the company said.


If you have an interesting article / experience / case study to share, please get in touch with us at [email protected]

Advertisement

Get real time updates directly on you device, subscribe now.

Subscribe to our newsletter
Sign up here to get the latest news, updates delivered directly to your inbox.
You can unsubscribe at any time

Leave A Reply

Your email address will not be published.

Virtual Conference

Leading the future for the connected world

The ability to adapt to new technologies while supporting critical systems requires a smart network infrastructure.
REGISTER NOW
close-link
Know how to deliver a seamless customer experience from cable to cloud.
Register for Free
close-image