Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
When Trust Becomes a Trojan Horse: How Cybercriminals Are Weaponizing File-Sharing Platforms
📁 Legitimate File-Sharing Services: The New Frontier for Cyber Threats
Cybercriminals are increasingly leveraging trusted platforms like GetShared to bypass traditional email security measures. A recent incident involved a phishing email that mimicked a GetShared notification, claiming to share a file named “DESIGN LOGO.rar.” The email included a message inquiring about pricing and delivery timelines, creating a facade of legitimacy. However, red flags such as the mismatch between the file name and the message content, and the sender’s email domain linked to known scam activities, revealed its malicious intent.
These attacks exploit the inherent trust in legitimate services, making them less likely to be flagged by security filters. Employees may inadvertently engage with such emails, leading to potential breaches.
At AUMINT.io, we offer AI-driven solutions to detect and mitigate these evolving threats. Our real-time simulations and training programs are designed to enhance your organization’s resilience.
👉 Book your free strategy session to learn how AUMINT.io can fortify your cybersecurity posture.
#CyberSecurity #Phishing #SocialEngineering #AUMINT #FraudPrevention #HumanElement