Categories: Ad Guardian PlusNews

Hackers attack Germany, Italy and US

Security researchers tracked activities of a new group of financially-motivated hackers. So, the hackers target a few companies and organizations in Germany, Italy, and the United States. And they try to infect them with backdoor, banking Trojan, or ransomware malware.

The attackers are more interested in manufacturing, healthcare industries and IT services that store critical data. Because they count on the fact that people who have their data here can afford high ransom payouts.

Hackers pretend to represent government entities asking for taxes or refunds, according to a ProofPoint report. And they usually send out low-volume emails. Also, researchers mention that: “Tax-themed Email Campaigns Target 2019 Filers, finance-related lures have been used seasonally with upticks in tax-related malware and phishing campaigns leading up to the annual tax filing deadlines in different geographies.”

A DOC file compromises computers

The hackers use a malicious Word document attached as the first step to compromise devices. When users open the document, it executes a script to run PowerShell commands. Then, they download and install ransomware, a Trojan or a backdoor.

The specialists explain that “Opening the Microsoft Word Document and enabling macros installs Maze ransomware on the user’s system, encrypting all of their files, and saves a ransom note resembling the following in TXT format in every directory.”

Christopher Dawson,

Christopher Dawson, Threat Intelligence Lead at Proofpoint, told The Hacker News that “Although these campaigns are small in volume, currently, they are significant for their abuse of trusted brands, including government agencies, and for their relatively rapid expansion across multiple geographies.”

Also, hackers

use lookalike domains, excessive technical writing and stolen branding, to be more convincing:

  • Bundeszentralamt fur Steuern, the German Federal Ministry of Finance,

  • Agenzia Delle Entrate, the Italian Revenue Agency,

  • 1&1 Internet AG, a German internet service provider,

  • USPS, the United States Postal Service.

The minimum protection against cybercriminals

Although they use well-known tools and techniques, these still work very well and let criminals gain access to organizations.

The basic online security steps would be:

  • disable macros from running in office files,

  • keep a regular backup of the important data

  • run one of the best antivirus software

  • never open email attachments from unknown/untrusted sources.

  • Avoid clicking the links from unknown sources.

Laurentiu Titei

View Comments

Recent Posts

Download SCR3310 Driver for Windows 11 and 10

Let’s have a look at some of the best methods to execute the SCR3310 driver…

1 day ago

How to Fix Windows Could Not Automatically Detect This Network’s Proxy Settings Error

Frustrated with the “Windows could not automatically detect this network’s proxy settings” error? You are…

2 days ago

How to Download and Update Display Driver in Windows 11,10

Imagine that you power on your computer, excited to play a game, watch a movie,…

4 days ago

What is an ISO File in Windows and How to Download It for Windows 7/10/11?

This simple guide will explain what an ISO file is and how to download an…

4 days ago

How to Get Access to Instagram Music for Collaboration

Modern-day brands are built on Instagram. Several successful businesses, such as Glossier, Nike, and Sephora,…

5 days ago

Best Free VPN for Firestick in 2025

A VPN, or Virtual Private Network, is a crucial tool to ensure privacy and security,…

6 days ago