Scammers Phishing campaign leverages Kaseya VSA fears | Malware Scammers exploiting Kaseya attack

Phishing campaign looks to leverage Kaseya VSA fears | Scammers exploiting Kaseya ransomware attack to deploy malware

I just wanted to give a short update about 2 new developments related to the Kaseya hack. Thanks to Threatpost and the Malwarebytes Threat Intellegence team for continuing to stay on top of these things. The first update is nothing specific to the hack itself but is about a second attack by a phishing gang using a phishing scam about the Kaseya hack to try and infect the system with the cobalt strike backdoor. According to Malwarebytes Threat Intel a malspam (malware spam) campaign started taking advantage of the Kaseya Ransomware attack. The phishing email claims to contain a Microsoft security update to patch the Kaseya Vulnerability. So the phishing attack is trying to take advantage of your fears about the Kaseya hack to trick you into installing some fake Microsoft update. What the email really contains is an exe attachment as well as a link to an exe that infects the machine with the Cobalt Strike backdoor. Here is a screenshot they obtained of a phishing email.
The second update topic is the delay of the patch by Kaseya. In one of Kaseya’s regular updates they said their on premise patch as well as the SaaS deployment have hit a snag.

Who knows what that means. I cannot imagine anything good. I could imagine that maybe they found the hackers were deeper in their systems than they thought or maybe the patch itself has a flaw that one of the third party security companies brought in to help found? The fact that they specifically said the SaaS deployment is delayed leads me to wonder if it is not something that they found in their VSA code itself. Maybe a back door or something. Again who knows. I hope they clear it up soon.

What is Phishing? Phishing Attacks. How phishing attacks work
Phishing is a type of social engineering where an attacker sends a fraudulent ("spoofed") message designed to trick a human victim into revealing sensitive information to the attacker or to deploy malicious software on the victim's infrastructure like ransomware. Phishing attacks have become increasingly sophisticated and often transparently mirror the site being targeted, allowing the attacker to observe everything while the victim is navigating the site, and transverse any additional security boundaries with the victim. As of 2020, phishing is by far the most common attack performed by cyber-criminals, with the FBI's Internet Crime Complaint Centre recording over twice as many incidents of phishing than any other type of computer crime

What ist he goal of phishing?
There are a couple of different ways to break attacks down into categories. Generally, a phishing campaign tries to get the victim to do one of two things:
• Hand over sensitive information. These messages aim to trick the user into revealing important data — often a username and password that the attacker can use to breach a system or account. The classic version of this scam involves sending out an email tailored to look like a message from a major bank; by spamming out the message to millions of people, the attackers ensure that at least some of the recipients will be customers of that bank. The victim clicks on a link in the message and is taken to a malicious site designed to resemble the bank's webpage, and then hopefully enters their username and password. The attacker can now access the victim's account.
• Download malware. Like a lot of spam, these types of phishing emails aim to get the victim to infect their own computer with malware. Often the messages are "soft targeted" — they might be sent to an HR staffer with an attachment that purports to be a job seeker's resume, for instance. These attachments are often .zip files, or Microsoft Office documents with malicious embedded code. The most common form of malicious code is ransomware — it is estimated that 93% of phishing emails contained ransomware attachments.

What are examples of phishing attacks?
While the goal of any phishing scam is always stealing personal information, there are many different types of phishing you should be aware of.
• Email Phishing. ...
• Spear Phishing. ...
• Whaling. ...
• Smishing. ...
• Vishing. ...
• Business Email Compromise (CEO Fraud) ...
• Clone Phishing. ...
• Evil Twin Phishing.
What are characteristics of a phishing email?
5 Characteristics of a Phishing Email
• The email makes unrealistic threats or demands. Intimidation has become a popular tactic for phishing scams. ...
• There's a catch. ...
• Poor spelling and grammar. ...
• A mismatched or dodgy URL. ...
• You are asked for sensitive information.

#Kaseya_hack
#Kaseya_ransomware_attack
#Kaseya_attack
#phishing
#phishing_definition
#spear_phishing
#what_is_phishing
#email_phishing
#phishing_email
#phishing_attack
#phishing_meaning
#amazon_phishing_report
#phishing_scams,
#phishing_scam
#what_is_phishing_email
#what_is_spear_phishing
#cybersecurity