Publicly disclosed information for this event

Index Number:

Title:

2017_011

Multiple Business Email Compromises (BEC) targeting South Korea and Japan.

Day	Month	Year	Country	Activity	Incident Type
1	January	2017	Korea, Republic of	Shipowner	Spearphishing

Summary

Multiple Business Email Compromises (BEC) targeting South Korea and Japan.

Victim

N/A

Claimed/Reported Threat Actor

Gold Galleon

Origin

Cybercrime

Main impact

Integrity

References

https://www.secureworks.com/research/gold-galleon-how-a-nigerian-cyber-crew-plunders-the-shipping-industry

Recommendations to Shipowner to reduce Spearphishing risks:

Implement advanced email filtering systems to detect and block spearphishing emails.
Educate employees about the dangers of spearphishing and how to identify suspicious emails.
Enforce strict email access controls and authentication measures.
Implement organizational measures to avoid scam.
Limit the use of social networks or unallowed medias for professional activities.
Monitor for unusual email activity, such as unexpected login attempts.
Work with your CSIRT organization to know the Tactics, Techniques and Procedures used.

Previous Next

Disclaimer: the data are provided as is. France Cyber Maritime and the M-CERT take no responsibility for the soundness, quality, precision, nor the eventual attribution made by the referenced URLs. We give a lot of respect and support to the victims of attacks.

Files generated on Thursday, 10th October 2024.
ADMIRAL is licensed under the Creative Commons