El secuestro de datos valiosos mediante sofisticadas técnicas de ransomware se ha convertido en un negocio altamente rentable para los ciberdelincuentes cambiando el enfoque.
Según un informe reciente, el grupo conocido como FIN11, que a lo largo de 2017-1018 se dirigió principalmente a sectores financieros y minoristas, ha realizado la transición de su arsenal en 2019 a la distribución de ransomware duplicando la extorsión de datos robados que amenaza a víctimas con divulgar datos públicamente si no pagan rescates.
FIN11 ha estado activo desde 2016 y sus miembros probablemente provengan de países de habla Rusa. Los metadatos encontrados en sus herramientas revelan el uso del alfabeto Cirílico donde el propio malware comprueba para evitar atacar sistemas configurados con idiomas de la CEI (Comunidad de Estados Independientes), una coalición de países de la ex Unión Soviética.
FIN11 ha realizado algunas de las campañas de distribución de malware más grandes en múltiples sectores en 2020, pasando a un modelo basado en el programa de ransomware llamado CLOP.
Lo que necesitas saber sobre el grupo FIN11:
- FIN11 utiliza correos de gran volumen con señuelos genéricos como órdenes de venta, extractos bancarios y facturas, pero también ataques dirigidos y personalizados en inglés, español, coreano y alemán con un número significativo de ataques a Alemania.
- Los métodos de entrega de malware cambian todos los meses para evadir la detección. Comenzó con archivos de Office infectados, luego uso de archivos adjuntos y ahora incluye URL en correos electrónicos HTML dirigidos a usuarios de Office en servidores remotos.
- En los últimos ataques de FIN11, los correos maliciosos tenían un archivo adjunto HTML que redirigía a las víctimas a dominios comprometidos, que las redirigía aún más a dominios controlados por atacantes que entregaron los archivos maliciosos de Office después de que los usuarios pasaran un desafío CAPTCHA. Es probable que esto se haya agregado para bloquear los análisis de URL automatizados por parte de productos y servicios de seguridad.
- Si una víctima parece interesante, después de la intrusión inicial, los atacantes FIN11 implementan múltiples puertas traseras con el objetivo de moverse lateralmente y obtener privilegios de administrador de dominio. Aunque sus herramientas exclusivas como Flawed Ammyy y MIXLABEL se utilizan para ganar el punto de apoyo inicial, la actividad de movimiento lateral implica el uso de muchas herramientas disponibles públicamente.
- A partir de este año, FIN11 también adoptó la táctica de robar datos y amenazar con liberarlos para obligar a las víctimas de ransomware a pagar. El grupo ha creado un sitio web oscuro donde han publicado datos parciales de empresas que se negaron a pagar.
Autor:
Mg. José Alfredo Carreón Romero - MSCS
-min.png) |
Más de 30 años de experiencia en Tecnología Informática, 22 de los cuales dedicados a Seguridad Informática. Es CEO de ENCRYPTED, profesor y autor del Curso Security Informatics enseñándolo en la Universidad de California y ahora en UTEC y TECSUP de Perú. Trabajó con Steve Jobs en Apple como Evangelista Tecnológico y fue Director de Marketing de Seguridad Informática en HP, SUN, Brocade y iS3. Maestría en Computer Science en el Instituto Tecnológico Chalmers de la Universidad de Gothemburg - Suecia. Conoce más de su trabajo aquí |
SecureIQ es un newsletter de análisis sobre los más recientes eventos de seguridad informática y ciberseguridad que tienen lugar en el nuevo mundo de Covid-19, distanciamiento social, comunicaciones virtuales / móviles y de uso intensivo de las redes sociales.
Únete a la comunidad virtual de ciberseguridad y obtén la información más actualizada de seguridad informática y ciberseguridad aquí
COMPARTE TU OPINIÓN
Escribe aquí tu comentario.
Best Dating Apps in Seattle: Find Your Perfect Match
Best Dating Apps in Seattle Are you single and ready to mingle in Seattle? With its vibrant culture, stunning landscapes, and tech-savvy population, Seattle offers a fantastic dating scene for those seeking meaningful connections.
https://www.datinggroup.in/best-dating-apps-in-seattle-find-your-perfec…
best dating apps seattle
Casino Game Crossword Clue: Unveiling the World of Casino Games
Casino Game Crossword Clue Are you a crossword enthusiast searching for the answer to the crossword clue “Casino Game“? Look no further! In this article, we will delve into the captivating realm of casino games, exploring popular options, strategies, and the thrilling atmosphere of these games of chance.
https://www.101casinoreviews.com/casino-game-crossword-clue-unveiling-t…
casino game crossword clue
Best Boston Dating Apps
Best Boston Dating Apps, Are you single and living in Boston? Are you tired of the traditional dating scene and looking for a convenient and effective way to meet new people? Look no further! In this article, we will explore the best dating apps available in Boston that can help you find love, friendship, or even a casual fling
https://www.anastesiadatefraud.com/best-boston-dating-apps
best boston dating apps
Best Boston Dating Apps
Best Boston Dating Apps, Are you single and living in Boston? Are you tired of the traditional dating scene and looking for a convenient and effective way to meet new people? Look no further! In this article, we will explore the best dating apps available in Boston that can help you find love, friendship, or even a casual fling
https://www.anastesiadatefraud.com/best-boston-dating-apps
best boston dating apps
Best Boston Dating Apps
Best Boston Dating Apps, Are you single and living in Boston? Are you tired of the traditional dating scene and looking for a convenient and effective way to meet new people? Look no further! In this article, we will explore the best dating apps available in Boston that can help you find love, friendship, or even a casual fling
https://www.anastesiadatefraud.com/best-boston-dating-apps
best boston dating apps
Games Like Cashman Casino: The Ultimate Entertainment Experience
Are you a fan of the thrilling experience that Games Like Cashman Casino? Do you find yourself captivated by its exciting games, generous rewards, and engaging gameplay? If so, you’ll be thrilled to discover a world of similar games that provide the same level of entertainment and enjoyment.
https://www.casinopokerreviews.com/games-like-cashman-casino-the-ultima…
games like cashman casino
Dating App Free Trial: Exploring New Possibilities in Online Dating
Are you tired of the traditional dating scene and looking for a convenient way to meet potential partners? Look no further! With the emergence of Dating App Free Trial, finding love has never been easier.
https://www.anastesiadatereviews.com/dating-app-free-trial-exploring-ne…
dating app free trial
Dating App Free Trial: Exploring New Possibilities in Online Dating
Are you tired of the traditional dating scene and looking for a convenient way to meet potential partners? Look no further! With the emergence of Dating App Free Trial, finding love has never been easier.
https://www.anastesiadatereviews.com/dating-app-free-trial-exploring-ne…
dating app free trial
Dating App Free Trial: Exploring New Possibilities in Online Dating
Are you tired of the traditional dating scene and looking for a convenient way to meet potential partners? Look no further! With the emergence of Dating App Free Trial, finding love has never been easier.
https://www.anastesiadatereviews.com/dating-app-free-trial-exploring-ne…
dating app free trial
Inclave Casino Games: A Thrilling Experience for Online Gamblers
Casino games have long been a source of entertainment and excitement for gamblers around the world. With the advent of technology, online casinos have gained immense popularity, offering convenience and a wide range of games to players
https://www.casinoslotpoker.com/inclave-casino-games-a-thrilling-experi…
inclave casino games
Free Trial Dating Apps: Finding Love with a Risk-Free Approach
Free Trial Dating Apps In today’s digital age, online dating has become increasingly popular. People are turning to dating apps to meet potential partners and connect with like-minded individuals. While many dating apps require a subscription or payment plan, there is a growing trend of free trial dating apps that offer a risk-free approach to finding love.
https://www.amolatinreviews.com/free-trial-dating-apps-finding-love-wit…
free trial dating apps
Free Trial Dating Apps: Finding Love with a Risk-Free Approach
Free Trial Dating Apps In today’s digital age, online dating has become increasingly popular. People are turning to dating apps to meet potential partners and connect with like-minded individuals. While many dating apps require a subscription or payment plan, there is a growing trend of free trial dating apps that offer a risk-free approach to finding love.
https://www.amolatinreviews.com/free-trial-dating-apps-finding-love-wit…
free trial dating apps
Free Trial Dating Apps: Finding Love with a Risk-Free Approach
Free Trial Dating Apps In today’s digital age, online dating has become increasingly popular. People are turning to dating apps to meet potential partners and connect with like-minded individuals. While many dating apps require a subscription or payment plan, there is a growing trend of free trial dating apps that offer a risk-free approach to finding love.
https://www.amolatinreviews.com/free-trial-dating-apps-finding-love-wit…
free trial dating apps
Game Vault Casino Online: A Gaming Paradise at Your Fingertips
Are you a passionate gamer looking for an exhilarating online casino experience? Look no further than Game Vault Casino Online! With its vast array of thrilling games, generous bonuses, and seamless user interface, Game Vault Casino Online is your ultimate destination for unparalleled gaming entertainment.
https://www.casinositesreview.com/game-vault-casino-online-a-gaming-par…
game vault casino online
Secret Dating App Icons: Unlocking the Mystery Behind Their Meanings
Dating apps have revolutionized the way people connect and find love in the digital age. With the increasing popularity of these platforms, developers have introduced various features and symbols to enhance user experiences.
https://www.amolatinafrauds.com/secret-dating-app-icons-unlocking-the-m…
secret dating app icons
Secret Dating App Icons: Unlocking the Mystery Behind Their Meanings
Dating apps have revolutionized the way people connect and find love in the digital age. With the increasing popularity of these platforms, developers have introduced various features and symbols to enhance user experiences.
https://www.amolatinafrauds.com/secret-dating-app-icons-unlocking-the-m…
secret dating app icons
Secret Dating App Icons: Unlocking the Mystery Behind Their Meanings
Dating apps have revolutionized the way people connect and find love in the digital age. With the increasing popularity of these platforms, developers have introduced various features and symbols to enhance user experiences.
https://www.amolatinafrauds.com/secret-dating-app-icons-unlocking-the-m…
secret dating app icons
Lucky Duck Casino Game: A Fun and Rewarding Experience
Are you ready to try your luck and win big? Look no further than the exciting world of the Lucky Duck Casino Game. In this article, we will explore the captivating features, thrilling gameplay, and enticing rewards that await you in this popular casino game.
https://casinoworldreviews.com/lucky-duck-casino-game-a-fun-and-rewardi…
lucky duck casino game
Holy Dating App: Finding Love in a Digital World
One such unique platform is the Holy Dating App, which aims to bring together individuals who share common religious beliefs and values. In this article, we will explore the world of Holy Dating and discover how this Dating app can help you find love in a digital world.
https://www.amolatinanews.com/holy-dating-app-finding-love-in-a-digital…
holy dating app
Holy Dating App: Finding Love in a Digital World
One such unique platform is the Holy Dating App, which aims to bring together individuals who share common religious beliefs and values. In this article, we will explore the world of Holy Dating and discover how this Dating app can help you find love in a digital world.
https://www.amolatinanews.com/holy-dating-app-finding-love-in-a-digital…
holy dating app