Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
Vendor Email Compromise Is the Silent Killer of Trust
📩 The Next Cyberattack Will Come From a Trusted Email
💥 Vendor Email Compromise (VEC) is rising fast – and it’s more dangerous than BEC.
🕵️♂️ Attackers hijack legitimate vendor email accounts and slip into ongoing conversations. The invoice looks normal. The sender’s domain is clean. But the bank details? Totally fake.
💰 One click – and six figures vanish without a trace.
🤝 These aren’t random attacks. They’re hyper-targeted, patient, and timed to your billing cycle.
🧩 Most security teams don’t catch them because the email really does come from your vendor.
💡 The only solution? Human-level awareness, real-world simulations, and executive visibility into behavioral weak spots.
📉 Trust without verification is now a threat vector.
At AUMINT.io, we help finance, procurement, and executive teams simulate and counter VEC threats before attackers strike.
Your next invoice request might be a trap – would your team catch it?
Book Your Vendor Risk Simulation Today
#CyberSecurity #VendorEmailCompromise #VEC #InvoiceFraud #CISO #ProcurementSecurity #FinanceRisk #SocialEngineering #AUMINT #FraudPrevention #SMBSecurity