Malware-as-a-Service (MaaS) solution is leveraged for targeting a crime

#Nubank #Jupiter #BhartiAirtel
Development of MaaS models



Multiple cybercriminal groups are leveraging a malware-as-a-service (MaaS) solution to distribute a wide range of malicious software distribution campaigns that result in the deployment of payloads. Like the organizations that they target, threat actors are also continuously working to identify new revenue streams. In recent years, we have seen the development of malware-as-a-service (MaaS) models. These are malware packs that can be bought off-the-shelf on the dark web, just like normal IT software is purchased. MaaS wouldn’t exist if it weren’t profitable: Threat actors always chase the money. It’s widely accepted that cybercriminals mainly turn a profit with ransomware when it’s used in targeted attacks, whether they be on government agencies, critical infrastructure, or large enterprises. It is, therefore, possible to infer that confidence in the potential success of ransomware attacks is increasing. This is a testament to the sophistication of both the malware itself and the exploit tactics used by the threat actors.



Dubbed "Prometheus" and available for sale on underground platforms for $250 a month since August 2020, the service is a Traffic Direction System (TDS) that's designed to distribute malware-laced Word and Excel documents, and divert users to phishing and malicious sites, according to a Group-IB report. More than 3,000 email addresses are said to have been singled out via malicious campaigns in which Prometheus TDS was used to send malicious emails, with banking and finance, retail, energy and mining, cybersecurity, healthcare, IT, and insurance emerging the prominent verticals targeted by the attacks. It also requires multi-factor risk prioritization that supplements scanning data with third-party data such as EDR, CMBD, network connectivity, OT security, threat intelligence, and more. This analysis must also consider whether a vulne

By VARINDIA | 73 views