Spam and phishing mail

The best a man can get

Over here in Moscow, we didn’t see that much Russian language spam in the run-up to Valentine’s Day. This isn’t really surprising, as 14th February isn’t a traditional Russian holiday.

The run-up to Spring does include a couple of major national holidays: 23rd February and 8th March. In Soviet times, the 23rd February was Red Army Day – it’s since been renamed ‘Defenders of the Fatherland Day’, but in practice it’s simply a celebration of masculinity, with parties, drinking, and appropriately masculine presents being given by partners and colleagues.
And naturally, the question of what to give is being actively exploited by spammers.

Our spam traps have been inundated with a whole variety of offers: solar torches, mini toolkits, barbeque grills, pens and wallets. So far, so standard. Some spammers, though, are determindly targeting the traditionalists and the military minded by offering tank driving experiences, airplane flights and a whole range of weaponry, including crossbows. Delivery of a crossbow, complete with bolt, is free within Moscow – if you live further out, you’ll have to pay the shipping fees.

It will be interesting to see what the spammers offer for 8th March, which is International Women’s Day. Probably nothing as exciting as a crossbow, but we’ll keep you posted.

The best a man can get

Your email address will not be published. Required fields are marked *

 

Reports

LuminousMoth APT: Sweeping attacks for the chosen few

We recently came across unusual APT activity that was detected in high volumes, albeit most likely aimed at a few targets of interest. Further analysis revealed that the actor, which we dubbed LuminousMoth, shows an affinity to the HoneyMyte group, otherwise known as Mustang Panda.

WildPressure targets the macOS platform

We found new malware samples used in WildPressure campaigns: newer version of the C++ Milum Trojan, a corresponding VBScript variant with the same version number, and a Python script working on both Windows and macOS.

Ferocious Kitten: 6 years of covert surveillance in Iran

Ferocious Kitten is an APT group that has been targeting Persian-speaking individuals in Iran. Some of the TTPs used by this threat actor are reminiscent of other groups, such as Domestic Kitten and Rampant Kitten. In this report we aim to provide more details on these findings.

Andariel evolves to target South Korea with ransomware

In April 2021, we observed a suspicious Word document with a Korean file name and decoy. It revealed a novel infection scheme and an unfamiliar payload. After a deep analysis, we came to a conclusion: the Andariel group was behind these attacks.

Subscribe to our weekly e-mails

The hottest research right in your inbox