As cited
Copy frozen at (site build).
threat intel
20+ Hijacked Government Websites Became an Attack Channel
Researchers discovered that more than 20 Brazilian government websites were compromised and used to distribute malware as part of an active campaign called PhantomEnigma. The investigation identified previously unknown backdoor functionality, infrastructure links, and multiple attack components associated with the campaign.
Why it matters: Security teams protecting government networks and endpoints need to identify and remediate any artifacts from these compromised sites, and defenders should monitor for indicators of compromise (IOCs) from this campaign across their infrastructure.
- Source published
- First seen by Cybersecurity Tracker