Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
🛡 Free Cloud Security Tools CISOs Can Implement Today 🛡
Cloud environments are expanding fast, but so are the risks. You don’t need a huge budget to secure workloads, monitor activity, and reduce misconfigurations.
Here’s a list of free cloud security tools every CISO should explore:
1️⃣ AWS Trusted Advisor (Free Tier) – Checks for security gaps and compliance best practices in AWS accounts.
https://aws.amazon.com/premiumsupport/trustedadvisor/
2️⃣ Azure Security Center (Free Tier) – Provides continuous assessment and actionable recommendations.
https://azure.microsoft.com/en-us/services/security-center/
3️⃣ Google Cloud Security Command Center (Free Tier) – Visibility across assets, vulnerabilities, and threats.
https://cloud.google.com/security-command-center
4️⃣ CloudMapper – Visualize AWS environments to identify risky configurations.
https://github.com/duo-labs/cloudmapper
5️⃣ ScoutSuite – Multi-cloud security auditing tool to detect misconfigurations.
https://github.com/nccgroup/ScoutSuite
6️⃣ Prowler – AWS security best practices assessment with CIS benchmarks.
https://github.com/toniblyx/prowler
7️⃣ Kubernetes Bench Security Tool – Checks Kubernetes clusters against CIS benchmarks.
https://github.com/aquasecurity/kube-bench
8️⃣ Falco – Runtime security monitoring for containers and Kubernetes.
https://falco.org/
Implementing these tools strengthens cloud posture, reduces attack surface, and helps CISOs maintain compliance without expensive licenses.
Want to see how human risk can undermine your cloud defenses? 🧠 AUMINT.io simulates social engineering attacks to uncover vulnerabilities beyond technology.
📅 Book a free intro call: Schedule here
💾 Save this post and secure your cloud environment today!
#CISO #CloudSecurity #CloudTools #CyberSecurity #InfoSec #AUMINT