{"id":2187,"date":"2022-08-05T08:00:08","date_gmt":"2022-08-05T08:00:08","guid":{"rendered":"https:\/\/www.nebrcentre.co.uk\/?p=2187"},"modified":"2022-08-05T08:00:08","modified_gmt":"2022-08-05T08:00:08","slug":"watch-out-cyber-spies","status":"publish","type":"post","link":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/watch-out-cyber-spies\/","title":{"rendered":"Watch Out: Cyber Spies\u00a0"},"content":{"rendered":"\n

Businesses and the IT teams should be aware of the following threat, which according to reports<\/a>, is seeing a North Korean based cyber organisation \u2013 identified as Kimusuky \u2013 using a malicious browser extension named \u2018Sharpext\u2019 to steal emails from Gmail and AOL accounts.<\/p>\n\n\n\n

Attackers have reportedly been installing the malicious web extension after compromising a victim\u2019s system by installing a custom script that replaces the \u2018Preferences\u2019 files with ones installed from the malware command centre.<\/p>\n\n\n\n

A victim can be scrolling through their emails and reading important information, all of which is being stolen and read by third parties under their noses. The attack remains undetected as it gains access through an already logged-in session, which goes unnoticed by the email provider.<\/p>\n\n\n\n

No suspicious activity alerts are activated, meaning that victims are often completely unaware that their information has been accessed and stolen. Previously, Sharpext has been used in targeted attacks on foreign policy and individuals of strategic interest in Europe and other Western countries.<\/p>\n\n\n\n

However, this malware has been used against individuals and businesses alike, as information is stolen and potentially sold to third parties. This can include customer details, bank information, and important login information that can take down systems and put your finances at risk.<\/p>\n\n\n\n

To avoid falling victim update your teams to avoid downloading and installing web extensions that look suspicious and have not been directly recommended by Google and other trusted authorities.<\/p>\n\n\n\n

If you suspect that your systems have been infiltrated, scan your system with anti-virus software, and contact Action Fraud and the police to report an ongoing cyber crime. <\/p>\n\n\n\n

The NEBRC is a\u00a0not-for-profit\u00a0organisation that seeks to educate, inform, and\u00a0support<\/a>\u00a0businesses across the UK\u00a0in\u00a0protecting themselves against\u00a0cyber crime\u00a0and fraud.\u00a0Why not sign up for our\u00a0free core membership?<\/a>\u00a0You\u2019ll gain access to\u00a0free cyber security resources<\/a>\u00a0and a regular newsletter so you can stay up to date with the latest\u00a0guidance.\u00a0For\u00a0further\u00a0advice\u00a0on protecting your business\u00a0online, please\u00a0contact us at\u00a0<\/strong>enquiries@nebrcentre.co.uk<\/strong><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Businesses and the IT teams should be aware of the following threat, which according to reports, is seeing a North Korean based cyber organisation \u2013 identified as Kimusuky \u2013 using a malicious browser…<\/p>\n","protected":false},"author":1,"featured_media":2188,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[13],"tags":[],"class_list":["post-2187","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"acf":[],"_links":{"self":[{"href":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/wp-json\/wp\/v2\/posts\/2187","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/wp-json\/wp\/v2\/comments?post=2187"}],"version-history":[{"count":0,"href":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/wp-json\/wp\/v2\/posts\/2187\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/wp-json\/"}],"wp:attachment":[{"href":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/wp-json\/wp\/v2\/media?parent=2187"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/wp-json\/wp\/v2\/categories?post=2187"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crcnetwork-cfkr6.projectbeta.co.uk\/northeastcrc\/wp-json\/wp\/v2\/tags?post=2187"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}