Collaborate Disseminate
By Deeba Ahmed
TA2541 is extensively using a variety of Remote Access Trojans (RAT) in spear-phishing attacks to lure their target.…
This is a post from HackRead.com Read the original post: Unknown TA2541 group attacking aviation and defense sect… Continue reading Unknown TA2541 group attacking aviation and defense sectors since 2017
Analysts have noticed various attempts in recent years by hackers trying to breach entities in the aviation and aerospace industries, as well as related transportation fields. The operators typically use of off-the-shelf malware and deploy digital lures that refer to industry-specific topics like airline cargo conferences or machine parts. It now appears that most of those incidents were by the same group, according to cybersecurity firm Proofpoint. Dubbing the group “TA2541,” Proofpoint says the trail of evidence goes back to at least 2017, and the hackers remain a “consistent, active cybercrime threat.” Hundreds of different organizations have been targeted globally, with an emphasis on North America, Europe and the Middle East, the researchers say. Crime seems to be the main goal, says Sherrod DeGrippo, vice president of threat research and detection at Proofpoint, given TA2541’s targeting, its victims, its use of commodity malware and its high message volume. Campaigns ranging […]
The post Years of hacks against aviation, transportation industries are tied to one group, researchers say appeared first on CyberScoop.