Jewelbug APT Hijacks Browsers to Steal Cookies and Spy on Government Networks

Jewelbug has turned ordinary web browsing into an entry point for espionage. The China-based group compromised government webmail systems, stole browser cookies, and used that access to watch activity inside affected networks. Its campaigns reached ministries and targets across the Middle East, Southeast Asia, and South Asia. In one major incident, a malicious script was placed across more than 15 government webmail tenants, giving attackers a path to officials’ accounts. Analysts from Symantec identified Jewelbug as a hackers-for-hire operation that combines government spying with cryptocurrency fraud. Symantec said in a report shared with Cyber Security News (CSN) that the same team, infrastructure, and control panel...

Read the full article at the source.