KuwaitPR.com, Online Press Release from Kuwait
 
Technology, Computers & IT(Technology)
Filter PR by
  
Cyberattacks on Kuwait Shipping and Transportation Organizations

September 24, 2019 - Kuwait

Between May and June 2019, Unit 42, the global threat intelligence team at Palo Alto Networks, observed previously unknown tools used in the targeting of transportation and shipping organizations based in Kuwait.

The first known attack in this campaign targeted a Kuwait transportation and shipping company in which the actors installed a backdoor tool named Hisoka. Several custom tools were later downloaded to the system in order to carry out post-exploitation activities. All of these tools appear to have been created by the same developer. We were able to collect several variations of these tools including one dating back to July 2018. 

The developer of the collected tools used character names from the anime series Hunter x Hunter, which is the basis for the campaign name “xHunt.” The names of the tools collected include backdoor tools Sakabota, Hisoka, Netero and Killua. These tools not only use HTTP for their command and control (C2) channels, but certain variants of these tools use DNS tunneling or emails to communicate with their C2 as well. While DNS tunneling as a C2 channel is fairly common, the specific method in which this group used email to facilitate C2 communications has not been observed by Unit 42 in quite some time. This method uses Exchange Web Services (EWS) and stolen credentials to create email “drafts” to communicate between the actor and the tool. In addition to the aforementioned backdoor tools, we also observed tools referred to as Gon and EYE, which provide the backdoor access and the ability to carry out post-exploitation activities.

Through comparative analysis, we identified related activity also targeting Kuwait between July and December 2018, which was recently reported by IBM X-Force IRIS. While there are no direct infrastructure overlaps between the two campaigns, historical analysis shows that the 2018 and 2019 activities are likely related.

Posted by : Kuwait PR Network Editorial Team
Viewed 5142 times
PR Category : Technology
Posted on : Tuesday, September 24, 2019  2:35:00 PM UAE local time (GMT+4)
Email this article Print this article

Share this article with your friends and followers
NewsVine
Back to Section Home

Related Stories

 
 
Most Viewed Press Release posted in the last 7 days
Gucci The Alchemist's Garden fragrance collection is now available at Sephora Middle East! [26318-Views]
La Closerie des Parfums, now in the UAE [20738-Views]
Saint Honore Haussman [20102-Views]
paco rabanne I Lady MILLION LUCKY [16494-Views]
Aigner Aprilia [15855-Views]
A Charming New Aigner Update [13030-Views]
Ella Balinska, a new ambassador of Panthère de Cartier [11759-Views]
Chloé's Iconic “Carlina” Sunglasses In a Precious New Interpretation [7273-Views]
Renault Al Babtain Announces its 2019 National Sales and Service Skills Contest Winners [6802-Views]
Burgan Bank Sponsors ‘Waves of Brazil' for the Third Consecutive Year [4481-Views]
Burgan Bank Continues Sponsorship of Ahmadi Music Group's World-Class Performances [4387-Views]
‘SpeedMate' from Al Babtain launches First Service Centre in Kuwait [4116-Views]
Burgan Bank Posts Strong Earnings with Q3'19 Net Income of KD 22.7mn [3981-Views]
Del Monte® Launches First Café in Kuwait at Terminal 4 (T4) at Kuwait International Airport [3854-Views]
ASAR – Al Ruwayeh & Partners bags 11th consecutive IFLR National Award for Kuwait and Lifetime Achie... [3809-Views]
Copthorne Kuwait City Hotel Scoops “Luxury Family Hotel” at the 2019 World Luxury Hotel Awards'' [3715-Views]
Copthorne Kuwait City Hotel Scoops “Luxury Family Hotel” at the 2019 World Luxury Hotel Awards [3661-Views]
Sam Habbas honored with Lifetime Achievement Award by IFLR [3661-Views]
Tamdeen Group Launches Al Khiran: The Region's First Hybrid Outlet Mall [3473-Views]
Burgan Bank invites its Premier customers to attend the expanded four screenings of “Terminator: Dar... [3022-Views]
 
RSS Facebook Twitter LinkedDin
 
Top Sections
 
Top Stories