Security News > 2020 > July > Iranian Hackers Accidentally Exposed Their Training Videos (40 GB) Online

Some of the victims in the videos included personal accounts of U.S. and Greek Navy personnel, in addition to unsuccessful phishing attempts directed against U.S. state department officials and an unnamed Iranian-American philanthropist.

"Some of the videos showed the operator managing adversary-created accounts while others showed the operator testing access and exfiltrating data from previously compromised accounts," the researchers said.

The IBM researchers said they found the videos on a virtual private cloud server that was left exposed due to a misconfiguration of security settings.

The videos - captured using Bandicam's screen-recording tool - also show that the actors behind the operation plugged the victims' credentials to Zimbra's email collaboration software intending to monitor and manage the compromised email accounts.

"During the videos where the operator was validating victim credentials, if the operator successfully authenticated against a site that was set up with multi-factor authentication they paused and moved on to another set of credentials without gaining access," the researchers said.

News URL

http://feedproxy.google.com/~r/TheHackersNews/~3/AGojF6xrBSA/iranian-hacking-training-videos.html