A watering hole attack aimed at gathering sensitive data for more than a year and a half has compromised up to 25 websites associated with the Kurdish minority.
The campaign known as SilentSelfie was revealed by the French cybersecurity company Sekoia, which also described the attack set as long-running, with the first indications of infection seen as early as December 2022.
It further stated that the four distinct iterations of an information-stealing framework are intended to be delivered via strategic web breaches.
Security researchers Felix Aimé and Maxime A reported on Wednesday that these varied from the most basic, which only took the user’s location, to more sophisticated ones that captured photographs from the selfie camera and persuaded read more about Watering Hole Attack on Kurdish Sites Distributing Malicious APKs and Spyware.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions