The Hacker News – Cybersecurity News and Analysis: Candiru

Israel’s Candiru Spyware Found Linked to Watering Hole Attacks in U.K and Middle East

November 17, 2021Ravie Lakshmanan

Israeli spyware vendor Candiru, which was  added  to an economic blocklist by the U.S. government this month, is said to have reportedly waged “watering hole” attacks against high-profile entities in the U.K. and the Middle East, new findings reveal. “The victimized websites belong to media outlets in the U.K., Yemen, and Saudi Arabia, as well as to Hezbollah; to government institutions in Iran (Ministry of Foreign Affairs), Syria (including the Ministry of Electricity), and Yemen (including the Ministries of Interior and Finance); to internet service providers in Yemen and Syria; and to aerospace/military technology companies in Italy and South Africa,” ESET  said  in a new report. “The attackers also created a website mimicking a medical trade fair in Germany.” The strategic web compromises are believed to have occurred in two waves, the first commencing as early as March 2020 before ending in August 2020, and the second string of attacks beginning in