Video | Agriculture | Confidence | Economy | Energy | Employment | Finance | Media | Property | RBNZ | Science | SOEs | Tax | Technology | Telecoms | Tourism | Transport | Search

 

Symantec Threat Intelligence: Waterbug

Today, Symantec has released new information about the Waterbug attack group. The group has continued to attack governments and international organisations over the past eighteen months in a series of campaigns that have featured a rapidly evolving toolset and, in one notable instance, the apparent hijacking of another espionage group’s infrastructure.

Waterbug’s most recent campaigns have involved a swath of new tools including custom malware, modified versions of publicly available hacking tools, and legitimate administration tools. The group has also followed the current shift towards “living off the land,” making use of PowerShell scripts and PsExec, a Microsoft Sysinternals tool used for executing processes on other systems.

Victims of Waterbug include government departments such as Foreign Affairs ministries in Europe, the Middle East and Latin America.

During an attack against a target in the Middle East, Waterbug appeared to hijack infrastructure from the Crambus espionage group and used it to deliver malware on to the victim’s network. While it is possible that the two groups may have been collaborating, Symantec hasn’t found further evidence to support this. It’s most likely that Waterbug’s use of Crambus infrastructure was a hostile takeover.

There are several potential, unconfirmed motives behind Waterbug’s takeover of Crambus infrastructure. Waterbug does have a track record of using false flag tactics to confuse investigators, but it’s also possible that the group strategically hijacked Crambus’s infrastructure as a means of gaining access to the target organisations.

To read the full Threat Intelligence Report please go to https://www.symantec.com/blogs/threat-intelligence/waterbug-espionage-governments


© Scoop Media

 
 
 
Business Headlines | Sci-Tech Headlines

 

FMA: Cigna Admits Making False And Misleading Representations
Cigna Life Insurance New Zealand Limited has admitted to making false and/or misleading representations to customers in proceedings brought by the Financial Markets Authority (FMA) – Te Mana Tātai Hokohoko... More>>


Statistics: Retail Card Spending Down 0.2 Percent In July
Retail card spending fell $11 million (0.2 percent) between June 2022 and July 2022, when adjusted for seasonal effects, Stats NZ said today... More>>




Barfoot & Thompson: Auckland Rental Prices Inch Up Again, But Upward Trend Could Ease In Coming Months

Data from nearly 16,000 rental properties managed by real estate agency Barfoot & Thompson shows Auckland’s average weekly rent rose by $6.12 (or 1 percent) during the second quarter... More>>




ASB: Full Year Results: Building Resilience Today And For Our Future

In its 175th year, ASB has reported a cash net profit after tax of $1,418 million for the 12 months to 30 June 2022, an increase of $122 million or 9% on the prior year... More>>


Commerce Commission: Draft Determination On News Publishers’ Association’s Collective Bargaining Application
The Commerce Commission (Commission) has reached a preliminary view that it should allow the News Publishers’ Association of New Zealand (NPA) to collectively negotiate with Meta and Google... More>>


Heartland: Retirees Facing Pressure From Higher Cost Of Living And Increasing Debt In Retirement

Heartland has seen a significant increase in Reverse Mortgages being used to repay debt. Among the most affected by the increasing living costs are retirees, many of whom are trying to get by on NZ Super alone... More>>