On February 21st, 2024, Cofense Intelligence identified an advanced phishing campaign that targeted the Oil and Gas sector to deliver Rhadamanthys Stealer, an advanced information stealer offered as Malware-as-a-Service (MaaS). The campaign incorporates several complex tactics, techniques, and procedures (TTPs) along with a unique vehicle incident lure that spoofs the Federal Bureau of Transportation. This campaign follows close behind several updates to the Rhadamanthys MaaS on the market place, and law enforcement’s takedown of the LockBit Ransomware group, one of the most notorious Ransomware-as-a-Service on the market. Due to the uniqueness of the campaign and success rate at which emails were reaching targets, a Cofense Intelligence Flash Alert New MaaS InfoStealer Malware Campaign Targeting Oil & Gas Sector was published along with an Active Threat Report...read more!
