Red Sky Alliance has been monitoring a global phishing campaign which leverages the Ex-Robotos phishing kit to gain access to usernames and passwords of targeted victims. This specific attacker generally targets engineering organizations but has been seen targeting other industries as well. They have been sending out emails since May of 2021, though the tool has been publicly available for purchase since 1 July 2019. Phishing plays a major role in cyber-attacks and often leads to data breaches and/or malware activation on the victim system. Training users to search for these threats is critical to preventing a successful phishing attack. Indicators of compromise (IoC) and open source YARA rules...
Read the full story here: IR-21-204-001-Ex-Robotos.pdf
Comments