Method of infection: Water-holing
OSIRIS used a Social Engineering method called “water holing” to attack German IP addresses.
How does water holing attack work?
- The victim enters the infected website.
- The website checks if the target IP is German.
- If it’s a German IP – few evasion techniques are used to bypass EDR
- And then the virus connects to its command server through the Darknet
Save Your Company from Social Engineering Attacks Like that
Register and Get your Personalized Free Exposure Report NOW,
And see where your Company is Exposed to Hackers
Recently Posted on AUMINT.io Blog
How Notification Tools Became a Cybercriminal’s Secret Weapon
🧪 Poisoned Notifications Are the New Insider Threat
🚨 Hackers are now using Slack, Jira & Teams to deliver malware
📦 Tool poisoning hides in build logs, changelogs, even commit messages
👨💻 Most security teams never think to train for this
🧠 AUMINT.io’s Trident simulates hybrid social engineering threats across your real workflows
📅 Book a defense session now
#ToolPoisoning #CyberSecurityTraining #HumanFirewall #DevSecOps #AUMINT #SocialEngineering #InfoSec