A woman is sitting at a laptop. File photoMOSCOW, Aug 10Kaspersky Lab has discovered a new Chinese-speaking cybergroup that attacks defense enterprises and government agencies in Eastern Europe, Russia and Afghanistan, the company said. «Afghanistan, Russia and a number of countries in Eastern Europe. In total, during the investigation, experts identified attacks on more than a dozen organizations. Presumably, the purpose of the attackers was cyber espionage. Experts suggest that the identified series of attacks may be related to the activities of the Chinese-speaking cyber group TA428, «said in Kaspersky Lab. To penetrate the infrastructure of enterprises, attackers used phishing emails containing Microsoft Word documents with malicious code. This scheme allows malware to gain access to the control of the infected system, the Lab notes. Letters received by employees also contained internal information about them, including the full name of employees working with confidential information, as well as internal code names of projects. as the main tool for developing the attack, the attackers used the Ladon utility with the ability to scan the network, search for and exploit vulnerabilities, steal passwords.At the final stage, they captured the domain controller and then gained full control over the workstations and servers of the organization that were of interest to the attackers,» experts explained. According to Kaspersky senior expert Vyacheslav Kopeitsev, spear phishing remains one of the main threats to industrial enterprises and government agencies, in addition, such attacks may be repeated in the future. 
Killnet hackers announced the launch of an attack on US defense corporation
