Spear phishing campaign targeted energy sector

Share this article:

A spear phishing campaign targeting 11 energy sector companies occurred last October, according to the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).

After an electric utility company posted to its website the names, company email addresses, and work titles of industry employees that attended a recent committee meeting, attackers were able to utilize the information to craft their messages, ICS-CERT said in its latest newsletter (PDF).

The malicious emails asked recipients to click on an attached link that would direct them to access the sender's new email address. Instead, the link led users to a website that served malware. Another email carrying a malicious attachment is believed to be associated to the campaign, according to the newsletter.

The campaign was unsuccessful, leading to no “known infections or intrusions,” the report said.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

Malware in Mexico, Ukraine ATM attacks may be culprit in Malaysia

Police are not naming the malware used, but speculation casts an eye on Backdoor.Ploutus or Backdor.PadPin.

Skills in demand: Communications and messaging experts

Skills in demand: Communications and messaging experts

The demand for infosec-focused communications and messaging pros is growing.

Company news: New execs at Malwarebytes and an acquisition by VMware

The latest mergers and acquisitions and personnel moves, including Malwarebytes, Abacus Group, VMware, Bay Dynamics, vArmour, Secunia, Norse and more.