An advanced persistent threat (APT) group, known as TA402 and supported by pro-Palestinian entities, has been conducting a phishing campaign against Israeli individuals and organizations. The group has been distributing IronWind malware through official-looking email attachments related to the Gulf Cooperation Council’s Economic Cooperation Program. The malware, which allows for the loading of additional malware like trojans or keyloggers to steal data, reportedly began operating in July 2023. Proofpoint suggested organizations undertake cybersecurity training, system upgrading, and continuous supervision of suspicious activities.
Major security alert: HWMonitor and CPU-Z software downloads delivering malware-laced installers – Sportskeeda Tech
Major security alert: HWMonitor and CPU-Z software downloads delivering malware-laced installers Sportskeeda Tech
