Operation FlightNight: Indian Government Entities and Energy Sector Targeted by Cyber Espionage Campaign
released on 2024-03-28 @ 12:37:59 PM
Beginning March 2024, a threat actor used phishing emails with ISO files containing malware to target Indian government agencies and energy companies. The malware exfiltrated documents and browser data to attacker-controlled Slack channels. Analysts assess the campaign was cyber espionage, likely by the same actor behind a January 2024 attack. The incident highlights the use of open-source tools and Slack for low-cost, hard-to-detect data theft.