Oct 14, 2017
On July 15, 2017, Wapack Labs identified, with high confidence, multiple keylogged, compromised email accounts belonging to an Indian physical security company. These email accounts were used to collect information from multiple internal systems and several external.
UPDATE Oct 14, 2017 - Since that initial notification in July, Wapack Labs has over 1500 new records in Cyber Threat Analysis Center (CTAC) intelligence collections, showing keylogger activities not only collecting data from the company's email system, but also accessing their Customer Relationship Management system, allowing potential targeting of the company's customers, including the Indian Oil and Coal Etender sites, Nuclear Power Company of India and others.
The company was notified of the breach in July, and again in October, with no response.
Companies cited in this report include:
- IndianOil Etenders – a contracting site for Indian Oil (https://iocletenders.gov.in/nicgep/app)
- MSTC METAL - A virtual 'online' market place for purchase of Steel, Ferrous/Non-Ferrous Finished/Semi Finished products on fixed price basis.
- Coal India Etenders - The eProcurement System of Coal India Limited: https://coalindiatenders.nic.in/nicgep/app
- Borat Oman Refineries: Procurement site: https://etender.borl.in/BORL
- Larsen & Toubro: Construction and engineering in the energy industry
- Hindustan Unilever, LTD: The Indian wing of the Multinational consumer goods company Lever International
- Samsung CNT
- Lupin Pharmaceuticals: Lupin Pharmaceuticals, Inc. is the U.S. wholly owned subsidiary of Lupin Limited, which is among the top five pharmaceutical companies in India with sales and marketing headquarters in Baltimore, MD.[2]
- NTPC: “India’s leading Oil and Petroleum company”[3]
- Hindustan Petrolium
- Blue Star “India’s leading air conditioning and commercial refrigeration”[4]
- Nuclear Power Company of India
- Rashtriya Chemicals and Fertilizers
- The Indian Navy
- Asian Paints
- Siddhi Vinayak Logistics
- Royal Moving Transportation
____________________________________________________________________________
