Eskenzi PR ad banner Eskenzi PR ad banner
  • About Us
Wednesday, 6 December, 2023
IT Security Guru
Eskenzi PR banner
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us
No Result
View All Result
IT Security Guru
No Result
View All Result

"Desert Falcons" APT group hit Middle East targets

by The Gurus
February 18, 2015
in Editor's News
Share on FacebookShare on Twitter

A group using self-developed targeted attack tools has hit 3,000 targets in the Middle East and carried out espionage actions across the region.
Named the Desert Falcons, according to the report by Kaspersky Lab the 30-strong Palestine, Egypt and Turkey-based group carries out its actions with its own “homemade malware tools and techniques to execute and conceal its campaigns on PC and Mobile OS”.
The group was first seen in 2011, with first infections made in 2013. By the end of 2014 and beginning of 2015, the group was very active. Most victims were in Palestine, Egypt, Israel and Jordan, but others have been discovered in Saudi Arabia, the UAE, the US, South Korea, Morocco, Qatar and others, and include Government, critical infrastructure, oil and gas, defence and media targets.
Infection is mainly carried out by a variety of technical and social engineering methods, including a fake website that promises to publish censored political information and asks users to download a malicious plugin to view a video, or the common use of spear phishing emails or social network messages to deliver malicious files using an extension override.
“The operation is very active and is currently in peak condition,” Kaspersky Lab said. “ We are continuously identifying new samples and victims for all related campaigns.
“Desert Falcons are the first known Cyber espionage attacks to be fully developed and operated by Arabic speakers to target the Middle East. It has affected a stunning range of victims, stealing more than one million special files.”
The company called it “an alert for the poor cyber security situation in the region” as the Desert Falcons’ threat actors are determined, active and have good technical knowledge.
“We expect their operations to carry on developing more Trojans and using more advanced techniques,” said Dmitry Bestuzhev, security expert at Kaspersky Lab’s Global Research and Analysis Team.
“With enough funding, they might be able to acquire or develop exploits that would increase the efficiency of their attacks. Desert Falcons is just one example of the rise of cyber crime in a geopolitically troubled region that will motivate other threat actors or states to leverage cyber attacks for political or criminal goals.”

FacebookTweetLinkedIn
Tags: APTattack
ShareTweet
Previous Post

Hunting high and low

Next Post

NSA offers no comment on Equation Group rumours

Recent News

New Synopsys Report Reveals Application Security Automation Soars

December 5, 2023
Over 80% of IT Leaders Want to Move Their On-Prem PAM Solution to the Cloud

Over 80% of IT Leaders Want to Move Their On-Prem PAM Solution to the Cloud

December 5, 2023
Centripetal real logo

Centripetal Announces Partnership With Tiger to Provide Cybersecurity Innovation to the UK Market

December 5, 2023
Google bins inactive accounts

Google bins inactive accounts

December 1, 2023

The IT Security Guru offers a daily news digest of all the best breaking IT security news stories first thing in the morning! Rather than you having to trawl through all the news feeds to find out what’s cooking, you can quickly get everything you need from this site!

Our Address: 10 London Mews, London, W2 1HY

Follow Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

  • About Us
No Result
View All Result
  • Home
  • Features
  • Insight
  • Channel News
  • Events
    • Most Inspiring Women in Cyber 2022
  • Topics
    • Cloud Security
    • Cyber Crime
    • Cyber Warfare
    • Data Protection
    • DDoS
    • Hacking
    • Malware, Phishing and Ransomware
    • Mobile Security
    • Network Security
    • Regulation
    • Skills Gap
    • The Internet of Things
    • Threat Detection
    • AI and Machine Learning
    • Industrial Internet of Things
  • Multimedia
  • Product Reviews
  • About Us

© 2015 - 2019 IT Security Guru - Website Managed by Calm Logic

This site uses functional cookies and external scripts to improve your experience.

Privacy settings

Privacy Settings / PENDING

This site uses functional cookies and external scripts to improve your experience. Which cookies and scripts are used and how they impact your visit is specified on the left. You may change your settings at any time. Your choices will not impact your visit.

NOTE: These settings will only apply to the browser and device you are currently using.

GDPR Compliance

Powered by Cookie Information