ONLINE “Ice Breaker”, cyberattacks targeting gaming and gambling industry 1 year ago Szarlot Post Views: 283 A new attack campaign has targeted the gaming and gambling sectors since at least September 2022, just months prior to the ICE London 2023 gaming industry trade fair event that’s scheduled next week. Israeli cybersecurity company Security Joes is tracking the activity cluster under the name Ice Breaker, stating the intrusions employ clever social engineering tactics to deploy a JavaScript backdoor. The attack sequence proceeds as follows: The threat actor poses as a customer while initiating a conversation with a support agent of a gaming website and urges the individual on the other end to open a screenshot image hosted on Dropbox. Security Joes said that the threat actor is “well-aware of the fact that the customer service is human-operated.” Clicking the malicious link sent in the chat leads to the retrieval of an LNK payload or, alternatively, a VBScript file as a backup option, the former of which is configured to download and run an MSI package containing a Node.js implant. The JavaScript file has all the features of a typical backdoor, enabling the threat actor to enumerate running processes, steal passwords and cookies, exfiltrate arbitrary files, take screenshots, run VBScript imported from a remote server, and even open a reverse proxy on the compromised host. Should the VBS downloader be executed by the victim, the infection culminates in the deployment of Houdini, a VBS-based remote access trojan that dates back to 2013. The threat actors’ origins are currently unknown, although they have been observed using broken English during their conversations with customer service agents. Some indicators of compromise (IoCs) associated with the campaign were previously shared by the MalwareHunterTeam in October 2022. “This is a highly effective attack vector for the gaming and gambling industry. The never-seen-before compiled JavaScript second stage malware is highly complex to dissect, showing that we are dealing with a skilled threat actor with the potential of being sponsored by an interest owner.” – Felipe Duarte, senior threat researcher at Security Joes, said. Source: thehackernews.com About Post Author Szarlot I am a fan of casino games especially roulette and blackjack. After that I analyze current events in the gambling industry. See author's posts SzarlotI am a fan of casino games especially roulette and blackjack. After that I analyze current events in the gambling industry. Facebook Twitter LinkedIn Email Print Tags: Cyberattacks, Ice Breaker, Security Joes Continue Reading Previous The State of Gaming and E-sport Space in AfricaNext TVBET enhances its iGaming footprint through St8 partnership More Stories ONLINE UGANDA Elevate Your Gaming Experience with the Buffalo Slots Mobile App 6 hours ago Tools ONLINE SOUTH AFRICA SOFTSWISS unveils South African iGaming market overview 1 day ago Samuel HOT NEWS ONLINE How has Cryptocurrency Changed the World of Casinos 1 day ago Samuel ONLINE WORLD NEWS Pragmatic Play further expands LatAm footprint by going live with Betsala 1 day ago Iwo Bulski NIGERIA ONLINE Can Lagos become Africa’s gaming hub? 1 day ago Szarlot ONLINE SOUTH AFRICA WA.Technology Unveils Next-Gen iGaming Solutions at BiG Africa Summit 2024 5 days ago Szarlot ONLINE WORLD NEWS Pragmatic Play Bolsters African Market Presence Through Betfounders Collaboration 5 days ago Iwo Bulski ONLINE WORLD NEWS Slotegrator Partners with Turbo Sportsbook 6 days ago Tools GAMES ONLINE Pragmatic Play introduces Beware the Deep Megaways 1 week ago Iwo Bulski ONLINE UGANDA Frequently Asked Questions about Buffalo Slots 1 week ago Iwo Bulski ONLINE UGANDA Xsolla Brings New Payment Methods for Gamers in Africa 1 week ago Szarlot NIGERIA ONLINE Crypto Regulation In Nigeria In 2024 1 week ago Samuel Leave a Reply Cancel replyYour email address will not be published. Required fields are marked *Comment * Name * Email * Website Save my name, email, and website in this browser for the next time I comment. Δ This site uses Akismet to reduce spam. Learn how your comment data is processed.