Security News > 2020 > March > Nation-State Attacks Drop in Latest Google Analysis

On the former front, Google researchers saw a growing trend emerge towards impersonating news outlets and journalists, especially when it comes to attackers from Iran and North Korea.

Attackers impersonate a journalist to seed false stories with other reporters to spread disinformation," explained Toni Gidwani, security engineering manager at the company's Threat Analysis Group, writing in an overview of nation-state trends, published last week.

"Therefore all exploits enabled IE8 rendering and used JScript.Compact as JS engine. In most Internet Explorer exploits, attackers abused the Enumerator object in order to gain remote code execution."

In one campaign, a single APT was seen using five zero-day exploits, delivered using watering-hole attacks, links to malicious websites and inemail attachments in targeted spear-phishing campaigns.

"Attackers' efforts have been slowed down and they're more deliberate in their attempts, meaning attempts are happening less frequently as attackers adapt."

News URL

https://threatpost.com/nation-state-attacks-google-analysis/154295/