News

Microsoft Blocks Lebanon-Based Hackers Targeting Israel

The hackers were abusing Microsoft’s file hosting service, OneDrive, to target private and government organizations in Israel.

Published

3 years ago

June 7, 2022

David Morelo

microsoft blocks lebanon-based hackers targeting israel

Microsoft Threat Intelligence Center (MSTIC) has successfully identified and disabled an attack orchestrated by a Lebanon-based activity group called Polonium.

The group was abusing Microsoft’s file hosting service, OneDrive, to target private and government organizations in Israel. Based on its tools and techniques, it seems that Polonium is affiliated with Iran’s Ministry of Intelligence and Security (MOIS).

“Polonium has targeted or compromised more than 20 organizations based in Israel and one intergovernmental organization with operations in Lebanon over the past three months,” explains MSTIC.

The good news is that all legitimate OneDrive accounts are completely safe because the attack didn’t involve any security issues or vulnerabilities. Instead, Polonium used the file hosting service for command and control to execute part of their attack operation.

Polonium’s targets include primarily organizations in critical manufacturing, IT, and defense industry. “In at least one case, Polonium’s compromise of an IT company was used to target a downstream aviation company and law firm in a supply chain attack that relied on service provider credentials to gain access to the targeted networks.”

MSTIC is still actively investigating how Polonium gained initial access to many of their victims, but it knows that most victims were running Fortinet appliances. Based on this fact, MSTIC suspects that the CVE-2018-13379 vulnerability was used to gain access inside the targeted organizations.

Also Read: Is Your Phone Hacked? How To Find Out & Protect Yourself

While the threat has been contained, there are certain actions MSTIC recommends all organizations to take to protect themselves, such as confirming that Microsoft Defender Antivirus is updated, enabling multi-factor authentication (MFA), and blocking in-bound traffic from specific IP addresses.

This isn’t the first instance of threat actors using OneDrive and other similar file hosting services to achieve their nefarious goals. Last year, for example, Microsoft discovered that OneDrive was used to host malware files commonly used to launch Conti ransomware attacks.

News

Yabi Introduces AI Financial Coach For Smarter Money Moves

The app provides real-time, personalized financial guidance, helping UAE residents manage money smarter, reduce debt, and build wealth effortlessly.

Published

13 hours ago

February 22, 2025

Nour Nasir

Yabi

Imagine having 24/7 access to an expert financial advisor — someone who understands your spending habits, helps you save more effectively, and offers guidance for every financial decision. That’s the vision behind Yabi’s revamped platform, an AI-driven finance app designed to transform personal finance management in the UAE.

Unlike traditional budgeting tools, Yabi acts as an always-available AI advisor, analyzing your unique spending patterns and offering real-time, tailored financial advice. Whether you’re making everyday purchases, planning a big trip, or saving for a major milestone, Yabi keeps you on track and helps you make informed financial choices.

Rakhil Fernando, CEO of Yabi, explains the mission behind the platform: “Financial literacy is not optional — it’s essential. But most financial tools today feel outdated and overly complex. Yabi is here to change that by offering AI-powered financial coaching that’s smart, simple, and accessible to everyone in the UAE”.

Here are some of the updated app’s new features:

AI-Powered Financial Coach: A 24/7 digital advisor providing real-time financial guidance based on your spending habits and available in multiple languages.
Live Insights: Connect your bank accounts for a detailed breakdown of your expenses.
Tailored Budgeting: Yabi creates a budget that fits with your actual spending habits rather than generic financial advice.
Interactive Financial Education: Learn the essentials of saving, investing, and credit management through engaging content integrated into the AI experience.
Automated Expense Tracking: Receive instant alerts on overspending, identify hidden charges, and cut unnecessary subscriptions with ease.
Credit Score & Financial Health Monitoring: Get free credit score checks and AI-driven recommendations to enhance your financial standing.

Also Read: A Guide To Digital Payment Methods In The Middle East

Finally, Yabi is also gearing up to introduce its own debit card and a suite of financial products, making it easier to save, spend, and invest within a single platform.

Want to try Yabi for yourself? You can download the app on the Apple App Store and Google Play Store.