20+ Hijacked Government Websites Became an Attack Channel
Summary
Over 20 Brazilian government websites have been compromised and used as a distribution channel for malware by the PhantomEnigma threat group. The campaign, uncovered by ANY.RUN, also revealed new backdoor functionalities and hidden infrastructure details.
IFF Assessment
The hijacking of government websites to distribute malware represents a significant threat to both government entities and their citizens, increasing the attack surface and potential for widespread compromise.
Defender Context
This incident highlights the risks associated with compromised government infrastructure, which can be leveraged for sophisticated malware distribution. Defenders should be vigilant about monitoring for unusual activity originating from government domains and implementing robust web security measures.