Malwarebytes
Hackers commit highway robbery, stealing cargo and goods
Hackers are carrying out a modern-day highway robbery, with a group of cybercriminals attacking trucking, freight and logistics firms by impersonating brands and redirecting real cargo to unapproved locations. According to new research, the attackers can place real bids on shipments by compromising carrier accounts and then divert the cargo to destinations where they or their partners can steal it.
The researchers say the impact stretches beyond the logistics sector, potentially disrupting supply chains and causing millions of losses, with commodities ranging from energy drinks to electronics being targeted and food and beverage products among the most common. The tactics include fake load boards that deliver malicious links to install Remote Monitoring and Management software, compromised broker and carrier accounts, hijacked email conversations, and social engineering such as phishing to lure victims.
The article notes that RMM tools are legitimate when used properly, but their abuse in campaigns underscores the need for verification of each installation.