What is a cyber attack "NEWSCASTER" that steals target information by letting it trust with "fake SNS account"?


ByKinikkin reims

Top cyber security company consisting of more than 200 experts from around the world "ISIGHT Partners", SNS and fake news site"NEWSCASTER"Published a report on cyber attacks targeting the United States, the UK, Israel. The fake SNS account is used to steal information aimed at private private persons, US military, diplomats, politicians, journalists in the Washington DC area, contractors in the US think tank, and defense systems.

NEWSCASTER - An Iranian Threat Inside Social Media - iSIGHT Partners
http://www.isightpartners.com/2014/05/newscaster-iranian-threat-inside-social-media/

ISIGHT Partners, a security company that leads corporate and government cyber attack countermeasures, is based on Iran-based Facebook, Twitter, LinkedIn, Google+, YouTube,BloggerWe announced cyber spy activity using SNS's fake account such as. These activities are "NEWSCASTER networkIt is said that it is continuing from 2011 to 2014 as of now.

ByGavin Llewellyn

The cyberspeople have created sophisticated fake accounts of SNS's elaborate pretenses as coverage of the media, government and defense systems, and the fake account created by the spy organizationNEWSCASTER (newsonair.org)It is creating credibility by using fictitious news sites updated with plagiarism news called " Spy is stolen from the daily update of unexplored locations, activities, friendships, family information, etc. by being friendly through target and fake account on SNS. Also, the target account is "Spear phishing fraud"Attacks, and cyber attacks such as stealing authentication information by displaying a fake login page and sending malware from a fake login page are being done.


As a result of several years of investigation, the time pattern in which these spy activities take place is the capital of IranTehranIt is consistent with the general working hours of newsonair.orgRegistered domain in TehranIt is reported that iSIGHT Partners is a cyber attack by Iran 's spy organization.

ISIGHT Partners sets the aim of the spy organization "1: Create connection of government officials and industrial leaders through SNS"2: Development of weapons system based on information from target and reconnaissance of US military"3: Development of a new cyber attack method like this timeI guessed. It is confirmed until the login authentication information of the SNS is stolen, but since many people use the similar password, it is necessary to access the other system by using the login authentication information and send the information It is also possible to steal, it is not clear exactly what kind of information is stolen.

Previously iSIGHT Partners identified cyber spy activities using SNS based in China, but long-term spying activities like the NEWSCASTER network are unparalleled. Although not using advanced technology, it is believed to have succeeded with tenacious perseverance. I do not know the full appearance of the organization and leaders and the involvement of the Iranian government at the moment, but iSIGHT Partners warns us not to contact unknown people or road organizations on SNS.

ByRobert S. Donovan

in Note,   Web Service, Posted by darkhorse_log