Threats Tagged 'misp-galaxy:mitre-attack-pattern="phishing - t1566"'

Telegram phishing and related activities

MediumPhishingGermanyFranceUnited Kingdom+4#misp-galaxy:mitre-attack-pattern="phishing - t1566"#type:osint#osint:lifetime="perpetual"

Investigation Report: APT36 Malware Campaign Using Desktop Entry Files and Google Drive Payload Delivery

MediumMalwareUnited KingdomGermanyFrance+4#type:osint#osint:lifetime="perpetual"#osint:certainty="50"

"Packets everywhere!" report about delivery abuse system and phishing

LowPhishingFranceBelgiumGermany+4#misp-galaxy:mitre-attack-pattern="phishing - t1566"#type:osint#osint:lifetime="perpetual"

A phishing campaign is actively targeting services associated with Luxembourg, leveraging fake websites hosted and served from AWS infrastructure. This threat uses highly convincing psychological techniques to deceive users into divulging sensitive information. Although no specific vulnerable software versions are identified and no patches are available, the attack exploits social engineering rather than technical vulnerabilities. The campaign is categorized under MITRE ATT&CK pattern T1566 and is ongoing with no known exploits in the wild beyond phishing attempts. European organizations, especially those with ties to Luxembourg or using AWS-hosted services, face risks of credential theft and potential subsequent compromise. Mitigation requires targeted user awareness, email filtering, and monitoring of AWS-hosted domains mimicking legitimate Luxembourg services. Luxembourg is the primary affected country, but neighboring countries with close economic or governmental ties may also be at risk. Given the ease of exploitation and potential impact on confidentiality, the threat severity is assessed as medium. Defenders should prioritize detection and user education to reduce the success of these phishing attempts.

MediumPhishingLuxembourgBelgiumFrance+2#phishing:techniques="fake-website"#phishing:psychological-acceptability="high"#tlp:clear