Categories: Ad Guardian PlusNews

Hackers attack Germany, Italy and US

Security researchers tracked activities of a new group of financially-motivated hackers. So, the hackers target a few companies and organizations in Germany, Italy, and the United States. And they try to infect them with backdoor, banking Trojan, or ransomware malware.

The attackers are more interested in manufacturing, healthcare industries and IT services that store critical data. Because they count on the fact that people who have their data here can afford high ransom payouts.

Hackers pretend to represent government entities asking for taxes or refunds, according to a ProofPoint report. And they usually send out low-volume emails. Also, researchers mention that: “Tax-themed Email Campaigns Target 2019 Filers, finance-related lures have been used seasonally with upticks in tax-related malware and phishing campaigns leading up to the annual tax filing deadlines in different geographies.”

A DOC file compromises computers

The hackers use a malicious Word document attached as the first step to compromise devices. When users open the document, it executes a script to run PowerShell commands. Then, they download and install ransomware, a Trojan or a backdoor.

The specialists explain that “Opening the Microsoft Word Document and enabling macros installs Maze ransomware on the user’s system, encrypting all of their files, and saves a ransom note resembling the following in TXT format in every directory.”

Christopher Dawson,

Christopher Dawson, Threat Intelligence Lead at Proofpoint, told The Hacker News that “Although these campaigns are small in volume, currently, they are significant for their abuse of trusted brands, including government agencies, and for their relatively rapid expansion across multiple geographies.”

Also, hackers

use lookalike domains, excessive technical writing and stolen branding, to be more convincing:

  • Bundeszentralamt fur Steuern, the German Federal Ministry of Finance,

  • Agenzia Delle Entrate, the Italian Revenue Agency,

  • 1&1 Internet AG, a German internet service provider,

  • USPS, the United States Postal Service.

The minimum protection against cybercriminals

Although they use well-known tools and techniques, these still work very well and let criminals gain access to organizations.

The basic online security steps would be:

  • disable macros from running in office files,

  • keep a regular backup of the important data

  • run one of the best antivirus software

  • never open email attachments from unknown/untrusted sources.

  • Avoid clicking the links from unknown sources.

Laurentiu Titei

View Comments

Recent Posts

Fix the Computer Screen Flickering Issue in Windows 11 and 10 Systems

Is your computer screen flickering? Though looking harmless initially, screen flickering can lead to eye…

15 hours ago

Fix Printer Not Being Found or Detected in Windows System

Is your printer not showing up on Windows, causing issues such as an inability to…

3 days ago

Apple Mobile Device USB Driver Download and Install in Windows 11/10

If you are trying to connect your iPhone, iPad, or any other Apple device to…

3 days ago

Download and Install Driver for Canon MP287 on Windows 11/10

Canon is renowned for its value for money printers and scanners, the Canon MP287 being…

6 days ago

Best Duplicate Photo Finder and Cleaner Tools for Windows 10/11

If you are fed up with the annoying cluster of duplicate images getting accumulated on…

6 days ago

Epson L3210 Resetter Free Download and Installation in Windows

You have arrived at the right place if you need an Epson L3210 resetter download…

6 days ago