Remove DNS Remove Passwords Remove Penetration Testing Remove Telecommunications
article thumbnail

Lyceum APT made the headlines with attacks in Middle East

Security Affairs

reported that Hexane is targeting organizations in the oil and gas industry and telecommunication providers. Lyceum was observed using password spraying and brute-force attacks to compromise email accounts of targeted individuals. The malware uses DNS and HTTP-based communication mechanisms. Security experts at Dragos Inc.

DNS 82
article thumbnail

Guarding Against Solorigate TTPs

eSecurity Planet

With access to DSInternals, the malware could query the AD servers and steal data, passwords, and keys. 509 keys or password credentials to legitimate OAuth applications to offer protracted authorized access. Also Read: Best Penetration Testing Software for 2021. Mail DNS controls. Cases showed malware added X.509

article thumbnail

Iran-linked APT34: Analyzing the webmask project

Security Affairs

Security expert Marco Ramilli published the findings of a quick analysis of the webmask project standing behind the DNS attacks implemented by APT34 (aka OilRig and HelixKitten ). The group conducts operations primarily in the Middle East, targeting financial, government, energy, chemical, telecommunications and other industries.

DNS 78