Google examines ransomware scheme that uses fake LinkedIn profiles
(Windows Phone Central)

A threat actor is using Microsoft`s own tools against it. What you need to know Google has exposed the details of ransomware campaigns driven by a group it has named `Exotic Lily.` Exotic Lily leverages fake user profiles and legitimate services such as OneDrive in order to add a more personal, realistic touch to its campaigns. Beyond OneDrive and LinkedIn, Exotic Lily has also utilized the weaknesses of Windows for its various efforts. Microsoft`s security teams routinely report on bad happenings going on in the cybercriminal world, including when such happenings affect the competition. But this time around, it`s Google highlighting how Microsoft`s services and products are being used by bad guys for bad purposes. Google released a report exposing the operations of a group nicknamed `Exotic Lily,` an Initial Access Broker (IAB). IABs infiltrate networks then auction that access to whichever cybercriminal will pay the most. Exotic Lily`s methods for infiltration are a bit more...