CERT-AGID Reports 254 Malicious Campaigns Targeting or Affecting Italy in a Week
Summary
CERT-AGID reported 254 malicious campaigns affecting Italy during 10–16 October, including 217 targeting Italian entities, and shared 1,468 IoCs with accredited entities. The weekly findings included phishing, smishing and malware campaigns.
Key points
- CERT-AGID analyzed 254 campaigns: 217 with Italian targets and 37 generic campaigns that also affected Italy.
- The CERT provided accredited entities with 1,468 identified indicators of compromise.
- Phishing themes included refunds, fines, renewals, banking and documents; the report counted 25 themes and 39 impersonated brands.
- The CERT detected and countered smishing campaigns impersonating the State Police over a fake GRA fine and the Automobile Club of Italy.
- The report identified 15 malware families affecting Italy. Notable campaigns involved Remcos, AgentTesla, FormBook and GuLoader.
- Malware was distributed through attachments including archives, spreadsheets, scripts, executables and PDFs.
Article Details
- Publisher
- CERT-AGID
- Report Period
- October 10–16 (year not stated)
- Scope
- Malicious campaigns affecting Italy, including campaigns targeting Italian entities and generic campaigns that also affected Italy.
- Sample Size
- 254 malicious campaigns analyzed
- Key Statistics
- 254 campaigns: 217 with Italian targets and 37 classified as generic but also affecting Italy.
- CERT-AGID identified 1,468 indicators of compromise.
- 25 themes were used to deliver malicious campaigns.
- 15 malware families affected Italy during the week.
- 39 brands were involved in phishing campaigns.
Malware
AgentTeslaImpiegato inoltre per veicolare i malware FormBook, Yuankong, Ghostbat, Bingomod e Agenttesla.AsyncRATRilevate infine diverse campagne di YuanKong, AsyncRat, ScreenConnect, Peerstitch, BingoMod, Hirubo, Modiloader, Parallax, EtherRat, GhostBat, Grandoreiro.BingoModImpiegato inoltre per veicolare i malware FormBook, Yuankong, Ghostbat, Bingomod e Agenttesla.FormBookImpiegato inoltre per veicolare i malware FormBook, Yuankong, Ghostbat, Bingomod e Agenttesla.GuLoaderImpiegato inoltre per veicolare i malware Screenconnect, Guloader e Parallax.PEERSTITCHRilevate infine diverse campagne di YuanKong, AsyncRat, ScreenConnect, Peerstitch, BingoMod, Hirubo, Modiloader, Parallax, EtherRat, GhostBat, Grandoreiro.RemcosRemcos – Scoperte due campagne italiane a tema “Delivery” e “Pagamenti” e quattro campagne generiche “Prezzi”, “Contratti” e “Ordine” veicolate per mezzo di allegati ARJ, COM, BIN, XLS, JS, ZIP e RAR.ScreenConnectImpiegato inoltre per veicolare i malware Screenconnect, Guloader e Parallax.YuanKongImpiegato inoltre per veicolare i malware FormBook, Yuankong, Ghostbat, Bingomod e Agenttesla.