Wateringhole Attack Targets Auto and Aerospace Industries | AlienVault

AlienVault reported that attackers have compromised a supplier/publisher website for simulation and system-engineering software and injected a malicious JavaScript framework called "Scanbox". The framework performs extensive reconnaissance of visitors (browser plugins, security products, Windows version) and can deliver/keyloggers to capture credentials, with the campaign targeting automotive, aerospace and manufacturing sectors and potentially linked to the Deep Panda APT.