Skip to main content

Hackers attacking corporate executive targets with personalized phishing emails

Security firm Proofpoint reports that a “financially motivated threat actor” it calls TA530 is currently targeting company executives and additional high-level employees in an unusually personalized spear phishing campaign. It’s targeting individuals with high-ranking roles such as chief financial officer and senior vice president using emails containing their specific names, job titles, phone numbers, and more within the email body.

A spear phishing campaign doesn’t send out emails to a general audience hoping to reel in a few victims, but typically focuses on a specific organization in order to hook individuals into giving up confidential information such as military data or trade secrets. The emails appear to derive from a trusted source, and contain a link to a fake malware-infested Web page or a file that downloads malicious software.

Proofpoint says the information used by TA530 can be gathered from public sites like the company’s own website, LinkedIn, and so on. It’s targeting up to tens of thousands of individuals located in organizations based in the United States, the United Kingdom, and Australia. The attacks are even larger than other spear phishing campaigns, but have yet to approach the magnitude of Dridex and Locky.

TA530 is mostly targeting financial services, followed by organizations in retail, manufacturing, health care, education, and business services. Technology-focused organizations are also affected along with insurance companies, utility services, and companies involved in entertainment and media. Transportation is the lowest on the list of targets.

TA530 carries a number of playloads in its arsenal, including a banking Trojan, a Point of Sale reconnaissance Trojan, a downloader, file-encrypting ransomware, a banking Trojan botnet, and more. For instance, the Point of Sale reconnaissance Trojan is mostly used in a campaign against retail and hospitality companies, and financial services. The banking Trojan is configured to attack banks located throughout Australia.

In a sample email provided in the report, Proofpoint shows that TA530 is attempting to infect the manager of a retail company. This email includes the target’s name, the company name, and the phone number. The message requests that the manager fill out a report regarding an incident that took place at one of the actual retail locations. The manager is to open the document, and if macros are enabled, it will infect his computer by downloading the Point of Sale Trojan.

In the few cases presented by Proofpoint, the targeted individuals receive an infected document although the security firm states that these emails can also contain malicious links and attached JavaScript downloaders. The company has also seen a few emails in the TA530-based campaigns that were not personalized, but still carried the same consequences.

“Based on what we have seen in these examples from TA530, we expect this actor to continue to use personalization and to diversify payloads and delivery methods,” the firm states. “The diversity and nature of the payloads suggest that TA530 is delivering payloads on behalf of other actors. The personalization of email messages is not new, but this actor seems to have incorporated and automated a high level of personalization, previously not seen at this scale, in their spam campaigns.”

Unfortunately, Proofpoint believes that this personalization technique isn’t limited to TA530, but will ultimately be used by hackers as they learn to pull corporate information from public websites such as LinkedIn. The answer to this problem, according to Proofpoint, is end-user education and a secure email gateway.

Editors' Recommendations

Kevin Parrish
Former Digital Trends Contributor
Kevin started taking PCs apart in the 90s when Quake was on the way and his PC lacked the required components. Since then…
How to use Google SGE — try out the search generative experience for yourself
Google SGE search tool.

Google's Search Generative Experience, or SGE, is an in-development tool for finding information faster and more readily in Google search. It involves an AI summary of some of the results from your search at the top of the page, letting you get quicker access to the information you're looking for -- at least in theory.

If you're eager to try it out for yourself, here's how to use Google SGE.

Read more
One of HP’s best student laptops is $230 off today
hp pavilion pro 14 review plus front angled

Anyone looking for a cheap laptop that will easily handle Word documents, web browsers, movies and some light editing will appreciate today's deal at HP. The Pavilion 15T-EG300 laptop is $230 off, bringing the total to just $370. It's not one of the best laptops out there, but it can hold its own against some of the best budget laptops. This deal has been around since Memorial Day, so it will probably stay here until it sells out -- but that could be at any minute.

Why you should buy the HP Pavilion 15T-EG300 laptop
The HP Pavilion is a great laptop for students looking to get a head start on savings and studies over the summer. It’s up there with several of the best laptops for college, and it has a large, 15.6-inch Full HD display that’s great for both taking notes in class and watching movies on the weekend. Dual speakers by Bang & Olufsen chip in for the show as well. Because this is a larger-sized laptop, it can house a larger battery. In most cases you’ll get a full day of use with this laptop, and fast charging technology will get you to a 50% charge in just 45 minutes. HP is among our best laptop brands as well, so you know you’re getting a computer that can last.

Read more
HP is having a big sale on some of its best laptops, from just $270
HP Spectre x360 13.5 front angled view showing display and keyboard deck.

For anyone looking for great laptop deals, look no further than HP right now. The popular manufacturer has a huge sale of all kinds of laptops. That includes deep discounts on budget-priced devices that are ideal for taking to class, right up to gaming laptops and super-stylish 2-in-1 laptops. Whatever your budget or expectations, there's something here for you. Let's take a deeper look at how you can save.
HP 14-inch laptop -- $270, was $450

Ideal for a student on a tight budget and simply in need of a laptop for typing up reports or taking notes, the HP 14-inch laptop is far from fast but it's competent. It has an Intel Celeron N4500 processor, along with 8GB of memory and 128GB of SSD storage. It'll run Windows 11 Home well enough with its 14-inch HD screen giving you sufficient room to work on. There's also a HP True Vision 720p HD webcam for taking video calls along with HP Fast Charge support so you can recharge quickly.

Read more