Hackers are Using Finance Smarts and English Skills to Attack Biotech Firms

Sometimes Social Engineering Can be Far More Effective than Complicated Malware When it Comes to Cyberattacks. Case in Point: the Cybersecurity Firm, FireEye, has Tracked a Recent Spate of Attacks Against over 100 Healthcare and Pharmaceutical Companies to a Particularly Smooth Group of Hackers. The Group -- which FireEye Calls, "Fin4" -- Leverages its Knowledge of those Industries, Financial Markets and Native English Skills for Targeted Attacks against Executives and Other Notable Employees. Instead of Relying on Spyware, the Group Carefully Crafts Emails that Trick Recipients into Logging into Malicious Websites to Steal their Email Logins. These Aren't your Typical Hackers --- FireEye Believes "Fin4" is Made Up of Americans or Western Europeans Who've Worked in the U.S. Banking Industry.


The Sophisticated and Methodical Nature of the Attacks also Distinguishes them from the Hackers Who just Want to Blindly Steal Data. Like Something Out of an Airport Espionage Thriller, "Fin4" Appears to be Gathering Information about Publicly Traded Companies in the Hopes of Getting a Leg-Up in the Stock Market. According to FireEye's VP of Threat Intelligence, Dan McWhorter, this is the 1st Time we're Seeing such a Sophisticated Attack Aimed at Taking Advantage of Financial Markets. But, Given just How Effective it's been, we Don't Expect it to be the Last.




Info Sources:

https://www.fireeye.com/company/press-releases/2014/12/fireeye-report-identifies-highly-sophisticated-cyber-threat-grou.html

http://www.nytimes.com/2014/12/02/technology/hackers-target-biotech-companies.html?_r=0