Russian businesses are being attacked by hackers, who are sending out emails with malware

CrimeaPRESS reports:

Experts have warned of new targeted attacks by cybercriminals on Russian businesses. Phishing emails containing malware are being sent to company employees.

Kaspersky Lab reported new types of attacks that Russian businesses encountered in June of this year. Attackers began actively sending out targeted emails containing malicious archives or links. Experts explained that when such archives are downloaded, offenders gain access to information stored on the employee’s personal computer (PC), including for downloading files.

Most often, the company noted, attackers disguised malicious software as corporate documents.

Phishing remains one of the most effective tools for gaining access to confidential corporate information, notes Anton Nemkin, a member of the State Duma Committee on Information Policy, Information Technology and Communications.

It does have a number of significant advantages. Firstly, it is not that expensive to send out a malicious mailing, especially given that most attackers do not create their own malware, but use ready-made ones. Secondly, any phishing attack uses the human factor, which, unlike technology, is very easy to deceive. According to Bi.Zone, last year up to 70% of incoming emails to corporate emails were phishing, spam or fraud. Russian businesses definitely need to think about additional security measures.— the deputy is sure.

According to Nemkin, most often in such scenarios, target devices are infected with malware, which is not always detected later. «Moreover, the software can be adapted to a specific PC, which reduces the likelihood of its detection,» the deputy noted.
Phishing is usually used to steal confidential information.

In general, the functionality here is quite extensive. Malicious software can delete data and copy it, but most often we are talking, of course, about collecting confidential information. For example, corporate documents or account data. At the same time, if previously stolen information was used for sale to competitors or for extortion, now the share of cases of cyber espionage is growing– said Nemkin.

According to the parliamentarian, the information security of any company is directly related to the developed digital literacy skills of its employees.

Unfortunately, this still receives little attention despite the fact that a lot of free educational content has appeared recently.the deputy emphasized.

Nemkin also noted that phishing is not always difficult to recognize:

First, pay attention to the sender’s address — is it familiar to you? Second, check the emails for a URL link, as well as attachments in .zip, .js, exe, .scr, .doc or .xls format. Another indicator of phishing — malware may ask the computer to enable macro supportthe deputy warned.

source: press service of the State Duma deputy Anton Nemkin

Crimea News | CrimeaPRESS: Latest News and Main Events