Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
DORA Is Now Final – Here’s What CISOs and Boards Must Act On Today
🛡️ DORA Just Became Mandatory – Are You Ready to Prove It?
🧠 Financial entities are waking up to a hard truth:
💥 DORA isn’t just about systems – it’s about people, vendors, and visibility.
⏳ The compliance deadline is January 17, 2025. But most haven’t started addressing the weakest link – the human attack surface.
🚨 DORA now demands you monitor and test every ICT risk – including third parties. That means your social engineering blind spots could now trigger a compliance failure.
🎯 This isn’t theory. It’s operational reality.
✅ Boards are now directly accountable for digital risk governance.
✅ Simulations must go beyond tech – into phishing, impersonation, and insider threats.
✅ Your cyber resilience must now be provable.
🔎 What’s most surprising?
DORA’s final standards expect proactive testing of non-technical risk vectors – and most orgs are still training humans once a year.
That’s a ticking bomb.
👁️🗨️ AUMINT Trident delivers DORA-ready human-layer simulations, exposure analysis, and board-grade insights.
⚡ Don’t get caught flat-footed.
👉 Book your walkthrough
#CyberResilience #CISO #DORA #DigitalRisk #ThirdPartyRisk #HumanFirewall #BoardGovernance #AUMINT