Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
CAPTCHA Is Now a Weapon – And Most Teams Aren’t Ready
🛑 Hackers Now Use Fake CAPTCHAs to Hack You
🧠 This isn’t phishing-as-usual. Cybercriminals are now deploying fake CAPTCHA challenges to hide malware installs and delay detection.
👁️ While you’re busy clicking traffic lights, a silent payload is activating in the background.
💻 Most users drop their guard when they see a CAPTCHA – it’s familiar. That’s exactly why it’s being used.
🎯 These tactics bypass traditional security tools, slipping through defenses undetected.
📉 Most security awareness programs don’t even cover this level of social engineering.
🚨 AUMINT.io delivers real-world simulations – including fake CAPTCHA traps – to help employees identify the unexpected before it’s too late.
Book a live AUMINT session to see how we train teams to recognize modern threats.
#CyberSecurity #SocialEngineering #CISO #SecurityAwareness #FraudPrevention #AUMINT