Summary: A long-running watering hole attack, dubbed SilentSelfie, has compromised 25 websites linked to the Kurdish minority, aiming to harvest sensitive information for over a year. The campaign utilizes various information-stealing frameworks, including malicious Android applications that exploit user permissions to gather data.
Threat Actor: Unknown | SilentSelfie Victim: Kurdish community | Kurdish community
Key Point :
Attackers compromised websites associated with Kurdish press, media, and political organizations.…