Following the news that Microsoft announced that hackers targeted European think tanks and non-profit organizations which often have contact with government officials, Corin Imai, Senior Security Advisor at DomainTools commented below.
Corin Imai, Senior Security Advisor at DomainTools:
“Microsoft’s discovery is an important reminder that while phishing is often associated with consumer-facing scams, the threat to businesses and organisations is equally as serious. The fact that EU think tanks and not for profits were targeted would indicate that the threat actors behind it were attempting to steal sensitive information or funds from the organisations, indicating a nation-state or large scale criminal enterprise. The aim could also have been simply to disrupt the operational capacity of these organisations, as we have seen nation-state actors such as Fancy Bears and the Lazarus group attempt in the past. Organisations of all shapes and sizes need to remain vigilant to phishing attacks, which could and often are the first steps down an even more sinister path of cybercrime.”
To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
Functional
Always active
The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
Preferences
The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
Statistics
The technical storage or access that is used exclusively for statistical purposes.The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
Marketing
The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.