Fb stated the group, identified within the safety trade as SideCopy, shared hyperlinks to web sites internet hosting malware which may surveil folks’s units. Targets included folks related to the federal government, army and legislation enforcement in Kabul, it stated. Fb stated it eliminated SideCopy from its platform in August.
The social media firm, which lately modified its identify to Meta
, stated the group created fictitious personas of younger girls as “romantic lures” to construct belief and trick targets into clicking phishing hyperlinks or downloading malicious chat apps. It additionally compromised reliable web sites to govern folks into giving up their Fb credentials.
“It is at all times tough for us to take a position as to the tip objective of the menace actor,” stated Fb’s head of cyber espionage investigations, Mike Dvilyanski. “We do not know precisely who was compromised or what the tip results of that was.”
Main on-line platforms and e-mail suppliers together with Fb, Twitter Inc, Alphabet Inc’s Google and Microsoft Corp’s LinkedIn have stated they took steps to lock down Afghan customers’ accounts throughout the Taliban’s swift takeover of the nation this previous summer time.
Fb stated it had not beforehand disclosed the hacking marketing campaign, which it stated ramped up between April and August, on account of security issues about its workers within the nation and the necessity for extra work to research the community. It stated it shared data with the U.S. State Division on the time it took down the operation, which it stated had appeared “well-resourced and chronic.”
Investigators additionally stated Fb had final month disabled the accounts of two hacking teams which it linked to Syria’s Air Pressure Intelligence.
Fb stated one group, generally known as the Syrian Digital Military, focused human rights activists, journalists and others opposing the ruling regime, whereas the opposite, generally known as APT-C-37, focused folks linked to the Free Syrian Military and former army personnel who had joined opposition forces.
Fb’s head of worldwide menace disruption, David Agranovich, stated the Syria and Afghanistan circumstances confirmed cyber espionage teams leveraging durations of uncertainty throughout conflicts when folks may be extra vulnerable to manipulation.
The corporate stated a 3rd hacking community in Syria, which it linked to the Syrian authorities and eliminated in October, focused minority teams, activists and members of the Individuals’s Safety Items (YPG) and Syria Civil Protection, or White Helmets.
It stated this group used Fb for social engineering and sharing malicious hyperlinks to attacker-controlled websites mimicking apps and updates across the United Nations, White Helmets, YPG, Fb-owned WhatsApp and Alphabet’s YouTube.
A Fb spokeswoman stated the corporate had notified about 2,000 customers affected by the campaigns in Afghanistan and Syria, the bulk in Afghanistan.
FbTwitterLinkedin
