India’s premier cybersecurity agency CERT-In (India’s premier cybersecurity agency) has found that spear phishing will be the “primary vector” to target individuals and organisations associated with the G20 Summit.
The suspected “cyber adversaries” are operating on behalf of North Korea, China (PRC) and Russia.
Spear phishing is a phishing method to trick specific individuals or groups within an organization into giving private information. It is a malicious tactic which uses emails, social media, instant messaging to lure the victims.
The sophistication of recent spear phishing makes attribution of threat actors increasingly difficult, which makes it more challenging for organizations to properly defend against them.