Information on this cyber-attack is contained in the latest advisory issued by the Nigerian Computer Emergency Response Team (ngCERT). The NCC, in a report, yesterday, said the group was renowned for infiltrating the networks of telecoms companies and ISPs. Between July and October, this year, Lyceum was implicated in attacks against ISPs and telecoms organisations in Israel, Morocco, Tunisia and Saudi Arabia. The advanced persistent threat (APT) group has been linked to campaigns that hit Middle Eastern oil and gas companies in the past. In that mode, Lyceum would attempt to deploy two different kinds of malware: Shark and Milan (known together as James).

Source: The Guardian November 16, 2021 03:15 UTC