Cyber Espionage Operation Targets Stock Exchange Executive's Outlook Mailbox
A sophisticated cyber espionage operation, known as Operation Aspides, targeted a senior executive at a major global stock exchange, compromising the executive's Outlook mailbox for approximately 150 days. The attackers used advanced techniques, including malware disguised as Adobe and OneDrive processes, and exfiltrated data via Dropbox and OneDrive Personal in small, incremental batches. The operation was discovered by Symantec and Carbon Black, who published technical indicators and a detailed timeline. The breach exposed sensitive information, including internal deliberations and potentially market-moving events. Attribution remains unconfirmed, but the operation's discipline suggests a state-linked actor.