A Pakistan based cyber attack group has been trying to exploit Indian government data by sending spear phishing emails to the government employees, as per a Fireeye blog. The cyber criminals sent an MS word attachment titled ‘7th Central Pay Commission’, knowing the high interest among government employees for the information as it is likely to benefit lakhs of them through increment in salaries.
These emails were generated over a fake domain timesofindiaa (.) in (which is misspell of a leading newspaper). The emails pretended to be sent by an employee of Times of India. Once downloaded or opened these emails decrypt themselves and try to connect the compromised system and leak its information and IP address.
The same cyber attackers’ group, APT has been conducting attacks on Indian Government’s cyber data since years now, as per Fireeye, a network security firm.
These spear phishing emails entitled 7th Pay Commission were first noticed on May 18, 2016. All these emails had same attachment: a malicious Microsoft Word document that exploited the CVE-2012-0158 vulnerability to drop a malicious payload, as per the post.
Add new comment