You have probably heard of hackers spying on users using their very own webcams that sits atop their computers. Researchers at ESET have discovered a new malware being used in very targeted attacks, likely for espionage purposes, that can be used by anyone. In fact, Jim Stickley at Stickley on Security hacked his own brother-in-law to show how easy it is to do.
Ok, so it isn’t likely that you are a target of espionage. Yes, it could happen, but this particular strain seems to be using the webcams and microphones of users in Ukraine and Russia. It’s called InvisiMole and the researchers think it’s been active since 2013 lurking around behind the scenes. It isn’t clear yet how it infects. Suffice it to say there is a very good chance it uses phishing or potentially takes advantage of unpatched systems.
Don’t let your guard down just because this one has only been active on the other side of the globe. In fact, it’s likely that copycats will be on the ball and try this one at home soon enough. And everyone can be a target or used to perpetrate espionage.
Be on the lookout for phishing attacks, particularly if you are in a role that might be an espionage target. That isn’t limited just to government agencies and contractors, but private businesses with highly sought-after intellectual property are at risk too. Even those in the financial industry should keep an eye open. These messages will likely come very personalized. So pay attention to what you post on social media too. Hackers collect information and create a very specific file for their targets so there is a higher likelihood they will open, and subsequently click links or attachments in email messages.
Also, make sure all systems you have are updated with the latest security patches and software updates. This is not an option anymore. Those wanting to get to your stuff look for this and they have automated tools to make it efficient. When you see that little update indicator pop up on your screen, pay attention to it.
Also, cover up your video camera when you’re not using it. You can just use a piece of paper and tape to do this, but if you prefer to use something more aesthetic, there are covers designed specifically for that that don’t leave that gooey mess behind. Then, shut off your computer or device’s microphone functions or set them to be active only when you’re using certain apps or software, if this is an option on your device.
Stickley’s brother-in-law was not totally caught off guard. However, you very well could be. Take these threats seriously and learn from them, so you don’t become someone’s target or be an unwitting assistant to espionage.
For banks and credit unions
Share this article with your members
Copy a ready-made summary and link for your newsletter, website or social posts.