Connect with us

News

Microsoft Blocks Lebanon-Based Hackers Targeting Israel

The hackers were abusing Microsoft’s file hosting service, OneDrive, to target private and government organizations in Israel.

Published

3 years ago

on

microsoft blocks lebanon-based hackers targeting israel

Microsoft Threat Intelligence Center (MSTIC) has successfully identified and disabled an attack orchestrated by a Lebanon-based activity group called Polonium.

The group was abusing Microsoft’s file hosting service, OneDrive, to target private and government organizations in Israel. Based on its tools and techniques, it seems that Polonium is affiliated with Iran’s Ministry of Intelligence and Security (MOIS).

“Polonium has targeted or compromised more than 20 organizations based in Israel and one intergovernmental organization with operations in Lebanon over the past three months,” explains MSTIC.

The good news is that all legitimate OneDrive accounts are completely safe because the attack didn’t involve any security issues or vulnerabilities. Instead, Polonium used the file hosting service for command and control to execute part of their attack operation.

Polonium’s targets include primarily organizations in critical manufacturing, IT, and defense industry. “In at least one case, Polonium’s compromise of an IT company was used to target a downstream aviation company and law firm in a supply chain attack that relied on service provider credentials to gain access to the targeted networks.”

MSTIC is still actively investigating how Polonium gained initial access to many of their victims, but it knows that most victims were running Fortinet appliances. Based on this fact, MSTIC suspects that the CVE-2018-13379 vulnerability was used to gain access inside the targeted organizations.

Also Read: Is Your Phone Hacked? How To Find Out & Protect Yourself

While the threat has been contained, there are certain actions MSTIC recommends all organizations to take to protect themselves, such as confirming that Microsoft Defender Antivirus is updated, enabling multi-factor authentication (MFA), and blocking in-bound traffic from specific IP addresses.

This isn’t the first instance of threat actors using OneDrive and other similar file hosting services to achieve their nefarious goals. Last year, for example, Microsoft discovered that OneDrive was used to host malware files commonly used to launch Conti ransomware attacks.

Related Topics:
Advertisement

📢 Get Exclusive Monthly Articles, Updates & Tech Tips Right In Your Inbox!

JOIN 17K+ SUBSCRIBERS

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

UAE Prepares To Launch Two Satellites: Thuraya-2 And MBZ-SAT

HH Sheikh Hamdan bin Mohammed bin Rashid Al Maktoum chaired the first meeting of the Supreme Space Council yesterday.

Published

5 days ago

on

December 17, 2024

By

uae prepares to launch two satellites thuraya-2 and mbz-sat

HH Sheikh Hamdan bin Mohammed bin Rashid Al Maktoum, Crown Prince of Dubai and Deputy Prime Minister of the UAE, chaired the first meeting of the Supreme Space Council in Dubai on December 16, 2024. The session highlighted the UAE’s ambitious space plans and took stock of the sector’s economic progress.

The council emphasized the growing role of private companies in advancing space technologies, noting that their contributions are now equal to that of the public sector. Members also praised initiatives like the Space Economic Zones Programme, which are designed to fuel innovation and investment in the space industry.

Discussing the UAE’s space journey, HH Sheikh Hamdan bin Mohammed bin Rashid Al Maktoum remarked, “The national space sector continues to grow and advance, and we take immense pride in the remarkable achievements we have accomplished over the years”.

Sheikh Hamdan also received updates on two upcoming satellite projects: Thuraya-2 and MBZ-SAT. Thuraya-2, developed by Space42, is slated for launch this December. Meanwhile, the MBZ-SAT, created by the Mohammed Bin Rashid Space Centre (MBRSC), will soon follow. MBRSC, a major driver of the UAE National Space Programme, continues to lead the nation’s space-related developments.

Space42 took the opportunity to showcase its advancements, including ongoing collaborations between public and private entities. The company also outlined strategies to promote innovation, boost revenue streams, and create new opportunities for growth in the sector.

Also Read: IBM Opens New Doha Office To Support Qatar’s Digital Growth

The UAE’s current projects build on a growing legacy of space exploration. Back in 2020, the nation made headlines with its Mars mission, successfully sending a probe into the planet’s orbit in 2021. This mission, which is now in its second phase as of June 2024, has been collecting critical data to develop a comprehensive diurnal image of Mars.

The UAE also ventured into lunar exploration with an unmanned mission aimed at studying untouched regions of the Moon’s surface. While the probe ultimately crashed during its landing attempt after communication was lost seconds before touchdown, the effort represented a significant step in the country’s exploration ambitions.

Continue Reading

#Trending