Cybersecurity researchers uncover first-ever use of LinkedIn to spread malware
June 18, 2020 Leave a comment
Cybersecurity researchers have uncovered what is believed to be the first-ever case of hackers using LinkedIn to infect the computers of targeted users with viruses, according to a new report. The hackers appear to have been sponsored by government and to have targeted employees of carefully selected military contractors in central Europe, according to sources.
The existence of the alleged cyberespionage operation was revealed on Wednesday by researchers at ESET, a cybersecurity firm based in Bratislava, Slovakia, which is known for its firewall and anti-virus products. The researchers said that the operation was carried out in 2019 by hackers who impersonated employees of General Dynamics and Collins Aerospace, two leading global suppliers of aerospace and defense hardware.
ESET researchers said that the hackers made use of the private messaging feature embedded in LinkedIn to reach out to their targets. After making initial contact with their intended victims, the hackers allegedly offered their targets lucrative job offers and used the LinkedIn private messenger service to send them documents that were infected with malware. In many cases, the targets opened the documents and infected their computers in the process.
The use of the LinkedIn social media platform by hackers to make contact with their unsuspecting victims is hardly new. In 2017, German intelligence officials issued a public warning about what they said were thousands of fake LinkedIn profiles created by Chinese spies to gather information about Western targets. Germany’s Federal Office for the Protection of the Constitution (BfV) said it had identified 10,000 German citizens who had been contacted by Chinese spy-run fake profiles on LinkedIn in a period of just nine months. And in 2018, a report by France’s two main intelligence agencies, the General Directorate for Internal Security (DGSI) and the General Directorate for External Security (DGSE), warned of an “unprecedented threat” to security after nearly 4,000 leading French civil servants, scientists and senior executives who were found to have been accosted by Chinese spies on LinkedIn.
Tricking a target into accessing a virus-infected document file is not a new method either. However, according to the researchers at ESET, this was the first case where LinkedIn was used to actually deliver the malware to the victims. As for the identity of the hackers, there appears to be no concluding information. However, ESET said the attacks appeared to have some connections to Lazarus, a group of hackers with North Korean links. Lazarus has been linked to the 2014 Sony Pictures hack and the 2016 Central Bank of Bangladesh cyber heist, which was an attempt to defraud the bank of $1 billion.
LinkedIn told the Reuters news agency that it had identified and terminated the user accounts behind the alleged cyberespionage campaign. Citing client confidentiality, ESET said it could not reveal information about the victims of the attacks. Meanwhile, General Dynamics and Raytheon Technologies, which owns Collins Aerospace, have not commented on this report.
► Author: Joseph Fitsanakis | Date: 18 June 2020 | Permalink
Complacency and substandard security by the United States Central Intelligence Agency were behind the Vault 7 leak of 2017, which ranks as the greatest data loss in the agency’s history, according to an internal report. The Vault 7 data loss was particularly shocking, given that the CIA should have taken precautions following numerous leaks of classified government information in years prior to 2017, according to the report.
Russian prosecutors have accused one of the country’s most respected hydroacoustics specialists, and globally recognized expert on the Arctic region, of spying for Chinese intelligence. This development highlights the competitive relationship between the two neighboring countries, who in recent years have tended to work together against what they perceive as a common threat coming from the United States.
Researchers at a university in Israel claim to have discovered a new low-tech eavesdropping technique, which relies on sound vibrations on the glass surface of light bulbs and requires equipment costing less than $1,000. The researchers claim that the technique, which they call “lamphone”, enables eavesdroppers to intercept, in real time, audible conversations from a room located hundreds of feet away, simply by recording the vibrations that sounds create on the glass surface of a common light bulb present in the room.
A court in Austria has found a retired Army colonel guilty of providing classified military information to Russia, following a closed-door trial. Interestingly, the alleged spy’s name has not been made public. Some Austrian media have been referring to him as “Martin M.”.
Moscow has reacted angrily to the Czech government’s decision to expel two Russian diplomats from the country, in response to allegations that the Kremlin plotted to assassinate three outspoken Czech politicians using a deadly poison. Russian officials pledged to respond in kind to Prague’s “indecent and unworthy deed”.
The United States Defense Intelligence Agency, a Pentagon organization tasked with collecting foreign military secrets, has rejected reports that it is spying on protestors inside the country. However, it confirmed that it has set up an “internal coordination group” to respond to “requests for information” by the Department of Defense. This development follows reports that some DIA employees communicated their concerns about being asked to spy domestically to the organization’s director last week.
The embassy of the United States in the United Arab Emirates declined free COVID-19 testing kits for its staff, because of concerns that the private labs offering the kits had ties to China, according to a new report. The testing kits were offered by a testing facility that was set up in March in Abu Dhabi, which is the capital of the oil-rich UAE —a close American ally in the Middle East.
The former president of Argentina, Mauricio Macri, has been indicted as part of a widening investigation into a domestic spying program, which allegedly targeted opposition politicians, journalists and other public figures. The alleged espionage took place between 2015 and 2019, when Macri occupied the country’s highest office.
India has expelled two officials at the High Commission of Pakistan in New Delhi, after they were allegedly caught with fake Indian identity papers while trying to acquire classified documents. But the Pakistani government has rejected the allegations and subsequent expulsions as “a part of persistent anti-Pakistan propaganda” from India, and said the two officials were tortured while under detention by Indian authorities.
As the Islamic State continues to transfer its activities online due to the coronavirus pandemic, the group has published the first issue of a new cybersecurity magazine, aimed at helping its members evade surveillance. The Islamic State, known previously as the Islamic State of Iraq and Syria, has always been active online. But the COVID-19 pandemic has prompted it to 
The United States has alleged that the Russian military flew over a dozen unmarked aircraft to Libya, in an attempt to provide air support for Russian mercenaries who are fighting in Tripoli. If true, this development marks a major escalation of Russia’s military intervention in the Libyan civil war.
A Saudi government official, who served as a senior advisor to the oil kingdom’s former Crown Prince, has accused the Saudi monarchy of abducting his children in order to force him to end his self-exile in Canada. With a doctorate in artificial intelligence from the University of Edinburgh, Dr. Saad al-Jabri was until 2015 a rare example of a highly educated government administrator among Saudi Arabia’s ruling elite. Dr. al-Jabri rose in the ranks of the Saudi aristocracy in the 1990s under the tutelage of his patron, Crown Prince Muhammad bin Nayef (pictured). Prince bin Nayef is the grandson of Saudi Arabia’s founding monarch, King Abdulaziz, and until 2015 was destined to succeed King Abdullah and occupy the kingdom’s throne. Eventually, bin Nayef appointed Dr. al-Jabri as Minister of State and made him his most senior and trusted adviser on matters of security and intelligence.
The embattled Prime Minister of Israel, Benjamin Netanyahu, met publicly with the Director of the Mossad, Yossi Cohen, and thanked him for leading the country’s procurement efforts during the COVID-19 crisis. The meeting was a rare public acknowledgement of the central role that the secretive spy agency played during the pandemic.
The United States has warned that it might be forced to stop sharing intelligence with Australia if the country’s second most populous state enters into a much-heralded investment agreement with China. The Australian state of Victoria has said it intends to join Beijing’s Belt and Road Initiative, a worldwide investment venture that was announced with much fanfare by Chinese President Xi Jinping in 2013.
