Here's your Cyberair Pro research briefing for Tuesday, December 21st, 2021.

A vast has discovered a new targeted attack against a small lesser known U.S. Federal Government Commission associated

with international rights.

A vast doesn't name the affected entity, but the record reports that it was the United States

Commission on International Religious Freedom.

A vast isn't sure what the attackers were after, but they note that the threat actor had significant

access within the network.

Quote, while we have no information on the impact of this attack or the actions

taken by the attackers, based on our analysis of the files in question, we believe it's reasonable to conclude that the attackers were able

to intercept and possibly exfiltrate all local network traffic in this organization.

This could include information exchanged with other US government agencies and other international governmental and non-governmental organizations focused on international rights.

We also have indications that the attackers could run code of their choosing in the operating

systems context on infected systems, giving them complete control. Taken altogether, this attack could have given total visibility of the network and complete control of a system, and thus could be used as the first step in a and receiving no response. Quote,

after initial communication directly to the affected organization,

they would not respond, return communications,

or provide any information.

The attempts to resolve this issue included repeated direct follow-up

outreach attempts to the organization. We also used other standard channels for reporting

security issues directly to affected organizations and

standard channels the United States government has in place to receive reports like

this. In these conversations and outreach we have received no follow-up or information on whether the issues we reported have been resolved and no further information was shared with us.

Researchers at Google's Project Zero have analyzed an iOS exploit developed by Spyware

...