Threat actors are still targeting Spanish organizations due to the recent arrest of two cybercriminals linked to NoName057(16). Threat actors have been targeting both public and private groups for a while now, and NoName057(16) as well as Server Killers have revealed their latest purported assaults on their Telegram channels.
According to the messages, the following organizations were targeted:
- Official website of the Government of Spain
- The website of the Spanish Ministry of Transportation
- Spain’s Ministry of Finance
- Palma de Mallorca Port
- The Port of Huelva
- Zaragoza City Council
- Murcia City Council Housing Service
- Ruma (a company produces deli products)
- Canal de Isabel II (a company that manages the water supply for Madrid, Spain)
- Vendor portal on Canal de Isabel II website
- Access to virtual office
- Tender portal of the Canal de Isabel II Group
