Threat Actor Void Manticore Uses Cyber Weapon “Wipers” to Destroy Data and Systems
This Pro-Hamas hacktivist group has updated their payload arsenal to include updated versions of their BiBi Wiper malware, and two new wiper variants.
The Iranian threat actor, dubbed “Void Manticore” by security analysts at Checkpoint research, is responsible for conducting destructive attacks against Israeli and Albanian targets and leaking information online.
Working in conjunction with threat actor Scarred Manticore, the two groups have demonstrated coordinated attacks that impacted the same targets.
The wiper toolsets – and, in particular, BiBi Wiper – are focused lethal malware designed to corrupt files and disk partitions, using a multi-threaded architecture to speed up the process and enlarging the scope of damage.
These types of weapons have been spotted targeting both Linux and Windows systems, but have been limited to geo-political use by threat actors.
While these two threat groups primarily gain initial access via exploits of public-facing applications, the damage of their attacks should be a warning to critical infrastructure organizations in literally any country; should your country become the target, so does your environment.
The time is now to shore up your vulnerability management, your preventative security solutions around email and the web, and implement the use of security awareness training to assist in minimizing the risk of entry via phishing or social engineering attacks.
KnowBe4 empowers your workforce to make smarter security decisions every day. Over 65,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
Free Phishing Security Test
Would your users fall for convincing phishing attacks? Take the first step now and find out before bad actors do. Plus, see how you stack up against your peers with phishing Industry Benchmarks. The Phish-prone percentage is usually higher than you expect and is great ammo to get budget.
Here’s how it works:
- Immediately start your test for up to 100 users (no need to talk to anyone)
- Select from 20+ languages and customize the phishing test template based on your environment
- Choose the landing page your users see after they click
- Show users which red flags they missed, or a 404 page
- Get a PDF emailed to you in 24 hours with your Phish-prone % and charts to share with management
- See how your organization compares to others in your industry
PS: Don’t like to click on redirected buttons? Cut & Paste this link in your browser: https://info.knowbe4.com/phishing-security-test-partner?partnerid=001a000001lWEoJAAW