URLAbuse Identifies Major Phishing Campaign Targeting UAE Entities

-

In a significant breakthrough, URLAbuse has successfully identified and listed a sophisticated phishing campaign aimed at several major entities in the UAE, including du, RTA, and Etisalat. The discovery highlights the ongoing threats posed by cybercriminals and the importance of robust cybersecurity measures.

The campaign targeted several major entities in the UAE (including du, RTA, and Etisalat). This uniform targeting indicates a focused campaign with specific objectives, likely aimed at exploiting vulnerabilities within these high-profile targets.

URLAbuse's advanced detection engine played a crucial role in uncovering this campaign. The analysis revealed that the majority of the malicious domains used in this campaign are registered under the ".com" top-level domain (TLD). This preference for widely recognized and trusted domain extensions increases the likelihood of successful attacks.

 

TLD

The data showed a high concentration of malicious activity associated with As ( IQWeb FZ-LLC ) with ASN 59692, which is hosted by a company based in Dubai Internet City, a prominent free zone known for its concentration of tech. This ASN accounted for a considerable percentage of the total incidents, highlighting it as a critical node in the cyber campaign’s infrastructure.

AS

 

The reviews revealed that these domains are often registered by GoDaddy.com, LLC with IANA ID 146 and NameCheap, Inc. with IANA ID 1068.

Distribution of Registrar

To mitigate the threat and enhance cybersecurity measures, URLAbuse has shared these findings with Dubai and Abu Dhabi police, as well as with the cybersecurity teams at du and Etisalat. This collaborative effort aims to strengthen the defense against these sophisticated phishing attacks and protect users in the UAE.

The identification of this cyber campaign underscores the importance of continuous monitoring and analysis of internet traffic and domain registrations. By understanding the patterns and infrastructure used by malicious actors, cybersecurity professionals can better anticipate and mitigate potential threats.

Tags

Comments2

Plain text

  • No HTML tags allowed.
  • Lines and paragraphs break automatically.
  • Web page addresses and email addresses turn into links automatically.
CAPTCHA