Close access and spear phishing: How Russian officers used cyber attack methods

Close access and spear phishing: How Russian officers used cyber attack methods

Russian intelligence officers have been accused of launching cyber attacks on the global chemical weapons watchdog investigating the Salisbury nerve agent attack.

Officials in the Netherlands, where the Organisation for the Prohibition of Chemical Weapons (OPCW) is based, said the Russian GRU used two different methods to attempt to carry out cyber attacks on several targets – known as close access and spear phishing.

Dutch authorities said four GRU officers parked a car carrying specialist hacking equipment outside the headquarters of the OPCW in The Hague in an attempted close access attack.

In this case, officials said the GRU officers were trying to hack into the OPCW’s systems via its WiFi network.

Close access attacks can also be used when intruders wish to appear as insiders when accessing a network, using compromised credentials but without raising suspicion.

GRU cyber attacks
A car carrying hacking equipment used by GRU officers parked near the headquarters of the OPCW in The Hague. (Dutch Ministry of Defence)

Spear phishing is a method similar to the common phishing attacks deployed by hackers, in which blanket malicious emails are sent to people asking them for sensitive information such as bank details or encouraging them to visit a fake website, which then downloads malware to their computer.

Whereas phishing attacks tend to be broad in scale with emails sent to individuals indiscriminately, a spear phishing attack is purposely targeted at individuals or an organisation to gain access to their network.

– Advertisement –
– Advertisement –