Fata Morgana: Watering hole attack on shipping and logistics websites
ClearSky Cyber Security discovered a watering hole attack targeting at least eight Israeli shipping and logistics websites, likely orchestrated by an Iranian nation-state actor with possible attribution to Tortoiseshell (TA456/Imperial Kitten). The compromised sites deployed malicious scripts to collect preliminary user information from visitors. This attack demonstrates a sophisticated supply-chain-adjacent approach targeting critical infrastructure sectors.
Summary
ClearSky Cyber Security discovered a watering hole attack targeting at least eight Israeli shipping and logistics websites, likely orchestrated by an Iranian nation-state actor with possible attribution to Tortoiseshell (TA456/Imperial Kitten). The compromised sites deployed malicious scripts to collect preliminary user information from visitors. This attack demonstrates a sophisticated supply-chain-adjacent approach targeting critical infrastructure sectors.
Indicators of Compromise
- mitre_attack — T1189
- malware — Tortoiseshell