A two-year-old espionage campaign against the airline industry is ongoing, Cisco Talos researchers say. The campaign is likely the work of an unsophisticated threat actor based in Nigeria. The goal has been to pilfer credentials and cookies, which the attacker can offer to more technically savvy cybercriminals. The cyber-underground market for initial access brokers (IAB) is booming by all accounts, experts said. The business of gathering access to vulnerable organizations and then selling those to the highest bidder on the Dark Web has especially been on the rise.”]
Source: https://threatpost.com/airline-credential-theft-campaign/174264/