Linchakin

Social Media as Artillery Preparation for Spear Phishing

 September 14, 2021     No comments   

Social Media Preparation for Spear PhishingResearchers at ESTsecurity warn that a North Korean threat actor known as “Kumsong 121” is using compromised social media accounts to launch spear phishing attacks, the Daily NK reports. The attackers use the hacked accounts to target the victims’ acquaintances.

“After hacking an individual’s social media account, the attackers chose additional targets from the victim’s social media friends,” the Daily NK says. “The hackers lowered the guard of the target and earned their friendship by sending chat messages with friendly greetings and ordinary topics of interest or gossip. The attackers then sent an infected document file to the target through email by soliciting advice on a column related to North Korean affairs they claimed to have recently written.”

If the user opens the Word document and enables macros, their computer will be infected with malware.

The researchers note that the threat actor is also distributing mobile malware to target Android phones via malicious APK files.

“If victims install an infected Android package created by the hackers, much of their private information gets leaked, including the address books, text messages, phone records, location information, sound recordings and photos saved on their phones,” the Daily NK says.

Mun Chong Hyun, the head of the ESTsecurity Security Response Center, told the Daily NK that the threat actor has successfully compromised the phones of “well-known figures, including a certain South Korean lawmaker.”

“In particular, they often use mobile phones or email to contact you, pretending to be an acquaintance or industry expert,” he said. “When sent .apk or .doc files, the safest thing is to directly call the sender and confirm whether they are legit.”

Users should never enable macros in a Word document unless they’re absolutely certain the document is safe. New-school security awareness training can enable your employees to thwart targeted social engineering attacks.

The Daily NK has the story.

Adblock test (Why?)


You may be interested in:
>> Is a Chromebook worth replacing a Windows laptop?
>> Find out in detail the outstanding features of Google Pixel 4a
>> Top 7 best earbuds you should not miss

Related Posts:
>> Recognizing 12 Basic Body Shapes To Choose Better Clothes
>>Ranking the 10 most used smart technology devices
>> Top 5+ Best E-readers: Compact & Convenient Pen
  • Share This:  
  •  Facebook
  •  Twitter
  •  Google+
  •  Stumble
  •  Digg
Email ThisBlogThis!Share to XShare to Facebook

Related Posts:

  • Security in The Sea of Decentralized FinanceThe main developer and co-founder of Polycat Finn kindly agreed to answer a few questions about security, the choice of projects for investment, and a… Read More
  • Twitterrific 5.4.8 – Effortlessly read and compose tweetsby NMac Ked Twitterific has been re-imagined from the ground up to be the Mac’s most friendly, powerful and modern Twitter client. Twitterrific makes… Read More
  • The Ultimate Guide to Crypto TokensYou have probably heard lately the terms tokens, crypto tokens, and cryptocurrencies. In this article, I will cover in depth what crypto tokens are, h… Read More
  • UltraEdit 21.00.0.12 – Mac version of the Windows text editorUltraEdit is the world’s best text editor, now available for Mac. UltraEdit for Mac is a native Mac application based on the popular Windows text edit… Read More
  • UltraCompare 21.00.0.40 – Compare files and folders on Macby NMac Ked Powerful 2-way or 3-way file compare and folder compare, folder sync, Excel file compare, and a lot more. Sessions With UltraCompare’s s… Read More
Newer Post Older Post Home

0 Comments:

Post a Comment


Copyright © 2025 Linchakin | Powered by Blogger
Design by Hardeep Asrani | Blogger Theme by NewBloggerThemes.com | Distributed By Gooyaabi Templates