Reckless Exploit: Mexican Journalists, Lawyers, and a Child Targeted with NSO Spyware - The Citizen Lab
概要
Over 76 messages with links to NSO Group’s exploit framework were sent to Mexican journalists, lawyers, and a minor child (NSO Group is a self-described “cyber warfare” company that sells government-exclusive spyware).
The targets were working on a range of issues that include investigations of corruption by the Mexican President, and the participation of Mexico’s Federal authorities in human rights abuses.
Some of the messages impersonated the Embassy of the United States of America to Mexico, others masqueraded as emergency AMBER Alerts about abducted children.
At least one target, the minor child of a target, was sent infection attempts, including a communication impersonating the United States Government, while physically located in the United States.
Created: 2026-02-23
Indicators
Indicatorsは見つかっていない。
類似Pulses
このPulseに関連する脅威アクター (事実ベース)
Score: 8.38
Matched TTPs:
- T1597.002 - Purchase Technical Data
- T1591.002 - Business Relationships
MITREへのリンク →
Score: 5.64
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1204.001 - Malicious Link
- T1680 - Local Storage Discovery
MITREへのリンク →
Score: 26.45
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1591 - Gather Victim Org Information
- T1593.001 - Social Media
- T1598 - Phishing for Information
- T1585 - Establish Accounts
- T1204.001 - Malicious Link
- T1680 - Local Storage Discovery
- T1588.005 - Exploits
- T1078.003 - Local Accounts
MITREへのリンク →
Score: 12.20
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1591 - Gather Victim Org Information
- T1204.001 - Malicious Link
- T1008 - Fallback Channels
- T1078.003 - Local Accounts
MITREへのリンク →
Score: 6.65
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1591.002 - Business Relationships
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 10.78
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1001.003 - Protocol or Service Impersonation
- T1027.007 - Dynamic API Resolution
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 5.47
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1204.001 - Malicious Link
- T1078.003 - Local Accounts
MITREへのリンク →
Score: 21.51
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1591 - Gather Victim Org Information
- T1001.003 - Protocol or Service Impersonation
- T1027.007 - Dynamic API Resolution
- T1008 - Fallback Channels
- T1680 - Local Storage Discovery
- T1566.003 - Spearphishing via Service
MITREへのリンク →
Score: 6.94
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1552.006 - Group Policy Preferences
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 6.25
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1598 - Phishing for Information
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 9.17
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1593.001 - Social Media
- T1204.001 - Malicious Link
- T1566.003 - Spearphishing via Service
MITREへのリンク →
Score: 9.87
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1591.001 - Determine Physical Locations
- T1204.001 - Malicious Link
- T1566.003 - Spearphishing via Service
MITREへのリンク →
Score: 8.77
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1204.001 - Malicious Link
- T1008 - Fallback Channels
- T1566.003 - Spearphishing via Service
MITREへのリンク →
Score: 5.33
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1204.001 - Malicious Link
- T1566.003 - Spearphishing via Service
MITREへのリンク →
Score: 8.00
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1204.001 - Malicious Link
- T1566.003 - Spearphishing via Service
- T1078.003 - Local Accounts
MITREへのリンク →
Score: 3.97
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1566.003 - Spearphishing via Service
MITREへのリンク →
Score: 5.47
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1204.001 - Malicious Link
- T1078.003 - Local Accounts
MITREへのリンク →
Score: 6.94
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1552.006 - Group Policy Preferences
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 5.64
Matched TTPs:
- T1566.002 - Spearphishing Link
- T1204.001 - Malicious Link
- T1680 - Local Storage Discovery
MITREへのリンク →
Score: 6.72
Matched TTPs:
- T1217 - Browser Information Discovery
- T1585 - Establish Accounts
MITREへのリンク →
Score: 13.54
Matched TTPs:
- T1217 - Browser Information Discovery
- T1591 - Gather Victim Org Information
- T1614 - System Location Discovery
- T1680 - Local Storage Discovery
MITREへのリンク →
Score: 4.65
Matched TTPs:
- T1217 - Browser Information Discovery
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 6.72
Matched TTPs:
- T1217 - Browser Information Discovery
- T1598 - Phishing for Information
MITREへのリンク →
Score: 12.53
Matched TTPs:
- T1217 - Browser Information Discovery
- T1591 - Gather Victim Org Information
- T1598 - Phishing for Information
- T1566.003 - Spearphishing via Service
MITREへのリンク →
Score: 6.12
Matched TTPs:
- T1217 - Browser Information Discovery
- T1680 - Local Storage Discovery
MITREへのリンク →
Score: 7.57
Matched TTPs:
- T1681 - Search Threat Vendor Data
- T1008 - Fallback Channels
MITREへのリンク →
Score: 15.30
Matched TTPs:
- T1681 - Search Threat Vendor Data
- T1593.001 - Social Media
- T1585 - Establish Accounts
- T1204.001 - Malicious Link
- T1566.003 - Spearphishing via Service
MITREへのリンク →
Score: 3.84
Matched TTPs:
- T1591.002 - Business Relationships
MITREへのリンク →
Score: 8.08
Matched TTPs:
- T1591 - Gather Victim Org Information
- T1598 - Phishing for Information
- T1204.001 - Malicious Link
MITREへのリンク →
Score: 6.68
Matched TTPs:
- T1001.003 - Protocol or Service Impersonation
- T1680 - Local Storage Discovery
MITREへのリンク →
Score: 4.13
Matched TTPs:
- T1614 - System Location Discovery
MITREへのリンク →
Score: 7.57
Matched TTPs:
- T1585 - Establish Accounts
- T1588.005 - Exploits
MITREへのリンク →
Score: 3.44
Matched TTPs:
- T1585 - Establish Accounts
MITREへのリンク →
Score: 3.44
Matched TTPs:
- T1008 - Fallback Channels
MITREへのリンク →
Score: 5.50
Matched TTPs:
- T1680 - Local Storage Discovery
- T1078.003 - Local Accounts
MITREへのリンク →
Score: 5.36
Matched TTPs:
- T1680 - Local Storage Discovery
- T1566.003 - Spearphishing via Service
MITREへのリンク →
このPulseに関連する脅威アクター (推論ベース)
Score: 0.82
Matched TTPs:
- T1680 - Local Storage Discovery
- T1588.005 - Exploits
- T1078.003 - Local Accounts
- T1591 - Gather Victim Org Information
- T1585 - Establish Accounts
- T1566.002 - Spearphishing Link
- T1204.001 - Malicious Link
- T1598 - Phishing for Information
- T1593.001 - Social Media
MITREへのリンク →
Score: 0.70
Matched TTPs:
- T1680 - Local Storage Discovery
- T1591 - Gather Victim Org Information
- T1566.002 - Spearphishing Link
- T1008 - Fallback Channels
- T1566.003 - Spearphishing via Service
- T1027.007 - Dynamic API Resolution
- T1001.003 - Protocol or Service Impersonation
MITREへのリンク →
Related CVEs
このPulseに見つかったCVEはありません。
Pulse – 脅威アクター グラフ
← Pulse一覧に戻る