From Simple Scams to Silver Spaniel Attacks

How Evolved “419 Scammers” Are Targeting the Enterprise

Tue Sep 02 08:00:00 PDT 2014 于 Tue Sep 02 08:00:00 PDT 2014

Unit 42, the Palo Alto Networks threat intelligence team, has identified a series of attacks codenamed “Silver Spaniel”, emanating from Nigerian actors against our customers. These attackers, formerly associated with 419 scams targeted at unsuspecting individuals, are now using many of the same tools that cyber crime and espionage groups have deployed in the past. These actors represent an emerging threat to the enterprise.

In this webcast, we focus on these key takeaways:

  • Nigerian criminals are now using easily obtained Remote Administration Tools (RATs) such as NetWire, that provide complete control over infected systems
  • Silver Spaniel attacks are specifically designed to evade traditional antivirus programs
  • Indicators of compromise were observed for the NetWire RAT, and Unit 42 recommends protections you can employ against tools used in these attacks