Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
How Fake CAPTCHAs Became One of the Most Dangerous Entry Points in Cybercrime
🛑 The CAPTCHA You Clicked Might Be Malware
🧠 Cybercriminals have weaponized fake CAPTCHAs to deploy malware – and they’re working.
💥 Users are tricked into thinking they’re verifying identity, when in reality, they’re clicking “download malware.”
⚠️ These attacks are stealthy, visual, and play on trust.
🧪 AUMINT.io now includes simulated fake CAPTCHA attack training modules – testing if employees can spot and stop visual social engineering before it’s too late.
📉 These aren’t basic phishing attempts. They’re experience-based deceptions that bypass traditional filters and rely on one thing – human error.
🔐 If your team isn’t trained to spot trust-based visual traps, you’re already exposed.
👀 Want to see how your employees perform against fake CAPTCHA attacks?
Book a simulation demo today
#Cybersecurity #SocialEngineering #CISO #SecurityAwareness #Phishing #FraudPrevention #AUMINT #HumanRisk