Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
Vendor Email Compromise Outpaces BEC in EMEA – A Wake-Up Call for MSSPs
📧 VEC Attacks in EMEA Soar Past BEC Threats
Vendor Email Compromise (VEC) engagement in EMEA hits 47.3% – almost double BEC’s rate.
This rise shows how VEC exploits trust in external vendors, bypassing traditional BEC defenses.
EMEA reports only 0.2% of VEC incidents, signaling a critical awareness gap.
MSSPs must adopt advanced behavioral analytics and third-party identity monitoring to catch these sophisticated threats.
Continuous employee education and simulated VEC phishing drills are essential to close this gap.
At AUMINT.io, we deliver cutting-edge solutions combining threat detection and training tailored for these risks.
Protect your organization before attackers do.
Book a Consultation with AUMINT.io
#Cybersecurity #VendorEmailCompromise #EmailSecurity #MSSP #AUMINT