Ankura CTIX FLASH Update - November 22, 2022

Ransomware/Malware Activity

Phishing Campaigns Identified Targeting Middle Eastern Countries Prior to World Cup

Trellix researchers have identified an increase in email-based phishing attacks targeting the Middle East during the lead up to the World Cup in Qatar. The number of malicious emails in October was 100% more than the month previous, and the phishing campaigns are utilizing FIFA and soccer-based themes. This tactic of theme-leveraging is very common in social engineering attacks when popular events are taking place and chances of human error are increased. The researchers identified various email themes with embedded hyperlinks, including fake alert notifications for deactivation of 2FA, fraudulent FIFA ticketing office notifications claiming payment is needed, and legal notifications discussing a fake ban by FIFA. The hyperlinks transferred the victims to custom and legitimate-looking phishing pages. Several malware families were identified from these