Tired of spam? Get a quote on an effective cloud email security system that works with your current email. Click here.

Nitro Attacks Target The Chemical Industry

It was recently disclosed that numerous companies in the chemical sector were the subject of ongoing “nitro” attacks that sought to expose trade secrets using a trojan virus sent through Email.

Be Careful When Clicking!

Be Careful When Clicking!

The virus - internally named “nitro” by Symantec - was confirmed to be targeted at 29 companies in the chemical industry and 19 companies in other sectors, including the defense sector. “Nitro” attacked multiple Fortune 100 companies involved in research and development of chemical compounds and advanced materials, Companies that develop advanced materials primarily for military vehicles and Companies involved in developing manufacturing infrastructure for the chemical and advanced materials industry.

The attacks were orchestrated by researching targets and sending an infected Email to them specifically.

In some cases, organizations were sent more than 500 Emails that were disguised as correspondence from business partners or claimed the recipient needed to do a security update to their system. These Emails contained an attachment with an executable file that appeared to be a text file based on the file name and icon, or a password-protected archive containing an executable file with the password provided in the email.

In either case, the executable file was a self-extracting executable containing PoisonIvy, a common backdoor Trojan developed by a Chinese speaker. Once the attachment was opened, it installed PoisonIvy and used the program to report back sensitive information such as the computers IP address as well as the names of other computers on the network and dumps of Windows cached password hashes. Once it was unleashed on a corporate network, it scoured computers to find intellectual property and other sensitive data.

The Nitro trojan attacks took place from late July 2011 and continued through mid-September 2011.

Threats like this are becoming more prevalent as cybercriminals do their best to infiltrate companies of all sizes by using simple Email tactics, including phishing attempts sent directly to employees luring them to click on infected links and malicious files that could put corporate networks at risk for security breaches. Cloud based Email security can help filter for these threats and stop them from being delivered to unsuspecting employees that might accidentally click on an infected link or file.

About Heather

Thanks for reading my post! More about me .. I'm interested in helping others build great websites for their businesses and organizations using Web Presence Builder software. It's simply the easiest way to get Sitebuilding done in a flash! |

Comments

  1. Liane Markus says:

    This must be solved as soon as possible so as to prevent the spread of virus to some chemical companies who are not yet affected. I know this is quite a difficult situation but there is always a correct solution to any kind of problem.

  2. You’re right, Liane. This issue needs to be ‘nipped in the bud.’

    Thanks for stopping by,

    Darren

  3. Heather says:

    Hello Liane~ You are right about that! Using defensive measures is one way to help protect against attacks like this.