2 were the first to report that a new gang of cybercriminals is operating in Russia, Belarus and other countries.
According to the leading specialist of the groupAccording to Denis Kuvshinov's research on Positive Technologies threats, the attacks were successful because the samples of malicious software (malware) studied confirmed the collection, polishing and sending of data to the attackers' servers.
Experts link current activitiescybercriminals with similar campaigns in Belarus. A theory is currently being developed that the group is collecting intelligence for a foreign government.
According to the company, the group managed togo unnoticed since 2011. XDSpy attacks begin with a phishing email with attachments, the download of which infects the victim with malware.
XDSpy victims are located primarily in Russia,a minority of them are in Belarus, said Kaspersky Lab cybersecurity expert Denis Legezo. Single victims were also found in the Asia-Pacific region.
The task of the criminals is supposedly to collectintelligence for a foreign government. Experts have not yet named a specific country for which XDSpy allegedly works, but there is a small clue - some of the malware samples were compiled in Eastern European time zones.
Read also
Researchers have developed clean energy from graphene for the first time
On day 3 of illness, most COVID-19 patients lose their sense of smell and often suffer from a runny nose
The Doomsday glacier turned out to be more dangerous than scientists thought. We tell the main thing