Google security researchers discovered an espionage campaign, believed to be carried out by the Russian hacking group APT29, that targeted Mongolian government websites. The attackers used "watering hole" attacks from late 2023 to mid-2024.
In a watering hole attack, cybercriminals compromise legitimate websites popular among specific groups or industries, lying in wait to infect visitors for financial gain, botnet building, or targeted espionage. Watering hole attacks differ from traditional phishing attacks, which attempt to persuade users to click on malicious links. In this case, hackers infect legitimate websites, and users become victims of a cyberattack while visiting a legitimate website.
Notably, the Russian hackers leveraged the same exploits previously deployed by commercial surveillance vendors Intellexa and NSO Group.
This exploit demonstrates the evolving digital threat landscape and the need for robust cybersecurity measures to protect commercial and government entities from sophisticated attacks leveraging advanced exploits.
Read more: https://lnkd.in/eyJJV-Tz
Kommentare