BTC $67153.1824
ETH $3518.8510
BNB $593.1423
SOL $173.6872
XRP $0.5942
DOGE $0.1343
TON $7.2606
ADA $0.4375
wstETH $4130.6503
TRX $0.1348
AVAX $29.1102
WBTC $67151.9777
WETH $3564.0428
DOT $6.3333
LINK $14.2614
BCH $395.7035
UNI $8.0161
LTC $73.0376
DAI $1.0021
MATIC $0.5415
PEPE $0.0000
ICP $10.3297
KAS $0.1811
BSC-USD $0.9979
NEAR $6.2869
FET $1.4598
CAKE $2.0600
ETC $23.9273
APT $7.3661
IMX $1.6421
XMR $163.1140
MNT $0.8986
STX $1.9118
RNDR $7.0054
FIL $4.7122
INJ $27.6326
HBAR $0.0747
ENS $26.4902
WIF $2.6389
MKR $2812.0726
OKB $42.9636
VET $0.0305
TAO $337.2354
ONDO $1.0919
AR $33.5407
ATOM $6.5235
SUI $0.8500
BTC $67153.1824
ETH $3518.8510
BNB $593.1423
SOL $173.6872
XRP $0.5942
DOGE $0.1343
TON $7.2606
ADA $0.4375
wstETH $4130.6503
TRX $0.1348
AVAX $29.1102
WBTC $67151.9777
WETH $3564.0428
DOT $6.3333
LINK $14.2614
BCH $395.7035
UNI $8.0161
LTC $73.0376
DAI $1.0021
MATIC $0.5415
PEPE $0.0000
ICP $10.3297
KAS $0.1811
BSC-USD $0.9979
NEAR $6.2869
FET $1.4598
CAKE $2.0600
ETC $23.9273
APT $7.3661
IMX $1.6421
XMR $163.1140
MNT $0.8986
STX $1.9118
RNDR $7.0054
FIL $4.7122
INJ $27.6326
HBAR $0.0747
ENS $26.4902
WIF $2.6389
MKR $2812.0726
OKB $42.9636
VET $0.0305
TAO $337.2354
ONDO $1.0919
AR $33.5407
ATOM $6.5235
SUI $0.8500
  • Catalog
  • Blog
  • Tor Relay
  • Jabber
  • One-Time notes
  • Temp Email
  • What is TOR?
  • We are in tor
  • The Middle East region has been targeted by cybercriminals employing a recently developed IronWind malware

    Government agencies have been subjected to cyber attacks by hackers employing advanced techniques.

    Government organizations in the Middle East have recently been subjected to targeted phishing campaigns with the objective of disseminating IronWind malware. The aforementioned information came to light as a consequence of an inquiry carried out by Proofpoint.

    The attacks observed between July and October of this year have been attributed to a hacker group known as TA402, or Molerats, originating from the Gaza Strip, as stated by experts. The entity in question exhibits strong affiliations with Palestinian state hackers and has consistently focused on engaging in cyber espionage and perpetrating attacks against governmental organizations within the Middle Eastern region.

    According to Joshua Miller of Proofpoint, although cyber groups from North Korea, China, and Iran receive significant attention, the Middle East APT group TA402 has consistently demonstrated its proficiency in sophisticated cyber espionage and intelligence collection.

    Attackers employ diverse methods for disseminating IronWind, utilizing malware delivery techniques such as Dropbox links, XLL attachments, and RAR archives. This diverges from their prior instances of gang attacks employing the NimbleMamba backdoor.

    Upon infiltrating the system, IronWind initiates communication with the hackers' command and control (C2) server, subsequently procuring tools like SharpSploit to establish comprehensive authority over the compromised machines.

    Furthermore, during the months of August and October, perpetrators employed novel IronWind distribution techniques by means of deceptive electronic messages containing malevolent attachments. It has been observed by experts that criminals are continuously enhancing their tools and tactics in order to circumvent security systems.

    The ongoing volatility in the Middle East has not deterred their continued engagement. Miller emphasized the ongoing efforts to enhance techniques for evading detection systems and launching attacks on government organizations in the region.

    The attacks exhibit a high degree of specificity, primarily targeting governmental entities in the regions of the Middle East and North Africa. Hackers exhibit considerable expertise and ample resources in executing protracted intelligence operations.

    According to scholarly authorities, the persistence of the threat posed by TA402 and analogous groups is anticipated to endure in the foreseeable future. The need for increased vigilance and enhanced cybersecurity measures is emphasized by the stakeholders, urging government agencies in the region to take appropriate action.

    Moreover, a cause for concern lies in the potential utilization of hacking tools and strategies initially developed for attacks in the Middle East, which could subsequently be employed against targets in different geographical areas. Hence, it is imperative for the field of global cybersecurity to effectively mitigate the proliferation of these cyber threats.

    Author reign3d
    The UK experienced its highest cyber threats in 2018
    Cybersecurity in a Conflict Zone: Hackers' Attacks in Gaza

    Comments 0

    Add comment