Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.Β
How does water holing attack work?
- Β The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
Lazarus Turns GitHub Into a Playground for Social Engineering
π¨ Lazarus Just Hijacked GitHub Trust at Scale
π± Over 50 fake GitHub accounts tied to Lazarus were uncovered, showing just how far attackers will go to weaponize collaboration.
π©βπ» Instead of brute-forcing systems, they posed as developers and researchers, embedding themselves into trusted networks.
β‘ The danger wasnβt the code β it was the psychology. By pretending to be βone of us,β they tricked professionals into lowering their guard.
π This exposes a blind spot: technical tools canβt stop employees from trusting the wrong collaborator. Awareness and simulation are the only way to prepare.
π‘ AUMINT.ioβs Trident platform gives organizations the power to safely experience and counter these tactics before attackers exploit them.
π
Book your intro session here
and close the human gap in your defenses today.
#CISO #CTO #CyberSecurity #FraudPrevention #AwarenessTraining #Developers