{"id":2459,"date":"2020-05-02T13:33:17","date_gmt":"2020-05-02T13:33:17","guid":{"rendered":"https:\/\/cybersecuritynews.com\/?p=2459"},"modified":"2020-05-02T13:33:17","modified_gmt":"2020-05-02T13:33:17","slug":"top-executives","status":"publish","type":"post","link":"https:\/\/cybersecuritynews.com\/top-executives\/","title":{"rendered":"150+ Companies Top Executives are Hacked Via Successful Targeted Phishing Attacks"},"content":{"rendered":"\n

According to the security group, Group-IB Threat Intelligence, more than 150 companies’ top executives are hacked via successful targeted phishing attacks, they also got evidence regarding corporate email account establishment of an Asia-based company. <\/p>\n\n\n\n

Well, they stated that a cybercrime company had breached the email accounts of high ranking executive since-mid 2019. <\/p>\n\n\n\n

This conflict is dubbed as \u2018PerSwaysion,\u2019 and it is detected that this cyberattack campaign has leveraged the Microsoft file-sharing assistance including Power, SharePoint, and OneNote to eject extremely targeted phishing attacks. <\/p>\n\n\n\n

Top Executives Targeted<\/strong><\/h2>\n\n\n\n

Well, this conflict has mainly focused on the victims of high-ranking officers, and are above 20 Office 365 accounts of executives, presidents, and managing directors.<\/p>\n\n\n\n

\"\"\/<\/figure>\n\n\n\n

However, the high-profile victims managed to establish in the US, Canada, whereas, the remaining are in global and local financial centers such as Germany, UK, Netherlands, Hong Kong, and Singapore, and many other countries.<\/p>\n\n\n\n

\"Top<\/figure>\n\n\n\n

After getting all the data by using the server IMAP APIs, next, they create a PDF file that contains the data of the current victim, such as full name, email address, legitimate company name. Once they are done with the PDF file, next, they will send these files to a choice of new people who serve to be external of the victim’s organization and carry essential professions. <\/p>\n\n\n\n

Once the operators of PerSwaysion conducted new spear-phishing operations from a negotiated account, they just delete the representing emails from the outbox folder to evade disclosure, said the<\/a> Group-IB. <\/p>\n\n\n\n

At first, Group-IB was inadequate to identify the motive of the hackers, as they are gaining access only to the email accounts.<\/p>\n\n\n\n

\"Top<\/figure>\n\n\n\n

Thus there are three steps by which PerSwaysion’s whole scheme could be detected to avoid traffic detection and automated threat intelligence gathering:-<\/strong><\/p>\n\n\n\n