Monday, November 25, 2024
HomeMalwareEmployee Watched Porn at Work via 9000 Web pages Drops Malware on...

Employee Watched Porn at Work via 9000 Web pages Drops Malware on U.S Government Network

Published on

An Employee of  US Geological Survey (USGS) has a habit of watching pornography contents during Work hours and visiting the extensive history of porn websites which drop malware on Government Network.

U.S. Geological Survey (USGS), U.S based Earth Resources Observation and Science (EROS) Center provide science about the natural hazards that threaten lives and livelihoods; the water, energy, minerals, and other natural resources.

An IT security audit that was conducted at the U.S. Geological Survey (USGS) computer network reveals that the Employee visiting over 9000 web pages using U.S Government computers that routed via websites that originated in Russia and contained malware.

- Advertisement - SIEM as a Service

It was confirmed by the forensic report he/she saved many of the pornography images were saved in unauthorized personal USB and Android devices.

Officials said, “During the investigation, we identified two vulnerabilities in the USGS’ IT security posture: website access and open USB ports. Malware is rogue software that is intended to damage or disable computers and computer systems.”

The main motivation of the malware that dropped from the Russian based website is intended to steal the sensitive information from the government network.

According to the report that issued by  U.S. Department of the Interior’ s (DOI’s) IT Rules of Behavior prohibit employees from using DOI systems for illegal or inappropriate activities, explicitly including the viewing or distribution of pornography..

Also, they didn’t reveal the details about the Malware and the employee details who was involved in this activities.

USGS Recommendation for Better security 

USGS recommended to follow strong blacklist policy of known rogue URL or domains and regularly monitor employee web usage history.

Direct employees to refrain from connecting personal devices, such as USB drives and cell phones, to Government-issued computers or networks.

“EROS Center has deployed enhanced intrusion detection systems and firewall technology to assist in the prevention and detection of rogue websites trying to communicate with Government systems”

We further recommend that USGS employ an IT security policy that would prevent unauthorized USB devices on all employee computers.

Best practices for malware incident protection include restricting the use of removable media and personally owned mobile devices.

Also Read:

Beware! Downloader Malware Disguised as Game Apps Found On Google Play with More Than 51,100 Installations

Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Latest articles

Threat Actors Exploit Google Docs And Weebly Services For Malware Attacks

Phishing attackers used Google Docs to deliver malicious links, bypassing security measures and redirecting...

Python NodeStealer: Targeting Facebook Business Accounts to Harvest Login Credentials

The Python-based NodeStealer, a sophisticated info-stealer, has evolved to target new information and employ...

XSS Vulnerability in Bing.com Let Attackers Send Crafted Malicious Requests

A significant XSS vulnerability was recently uncovered in Microsoft’s Bing.com, potentially allowing attackers to...

Meta Removed 2 Million Account Linked to Malicious Activities

 Meta has announced the removal of over 2 million accounts connected to malicious activities,...

Free Webinar

Protect Websites & APIs from Malware Attack

Malware targeting customer-facing websites and API applications poses significant risks, including compliance violations, defacements, and even blacklisting.

Join us for an insightful webinar featuring Vivek Gopalan, VP of Products at Indusface, as he shares effective strategies for safeguarding websites and APIs against malware.

Discussion points

Scan DOM, internal links, and JavaScript libraries for hidden malware.
Detect website defacements in real time.
Protect your brand by monitoring for potential blacklisting.
Prevent malware from infiltrating your server and cloud infrastructure.

More like this

Threat Actors Exploit Google Docs And Weebly Services For Malware Attacks

Phishing attackers used Google Docs to deliver malicious links, bypassing security measures and redirecting...

Python NodeStealer: Targeting Facebook Business Accounts to Harvest Login Credentials

The Python-based NodeStealer, a sophisticated info-stealer, has evolved to target new information and employ...

Russian TAG-110 Hacked 60+ Users With HTML Loaded & Python Backdoor

The Russian threat group TAG-110, linked to BlueDelta (APT28), is actively targeting organizations in...