Imagine this scenario: Men in dressed in sharp-looking suits show up and claim to know details of your business and the kinds of security problems your organization has. They are Windows networking experts and want to fix those issues that made a breach possible.
Except those suits aren’t being helpful. Instead, they are likely from the Poseidon Group, a Brazilian cyber crime outfit that stealthily attacks organizations, steals information, and then manipulates the victims into hiring them to secure the network, said Kaspersky Lab researchers Juan Andres Guerrero-Saade, Santiago Pontiroli, and Dmitry Bestuzhev at the Kaspersy Lab Security Analyst Summit. The group steals data from infected networks with a customized malware signed with digital certificates and containing a PowerShell agent.
To read this article in full or to leave a comment, please click here