NEWS
New developments in the Automation, Robotics & AI industry
Kaspersky Unveils Targetted Attacks Against Industrial Holdings
R
esearchers at Russian cybersecurity firm Kaspersky have revealed a number of highly targetted attacks against various industrial holdings dating back to at least 2018. These kinds of attacks are rarer in a world with advanced persistent threat (APT) actors than campaigns against diplomats and other highprofile political figures. The toolset used in the attack - named MT3 by its authors, but dubbed “MontysThree” by the firm - uses a variety of subroutines and techniques to remain undetected, including hosting its communications with the control server on public cloud services and hiding the main malicious module using steganography. A majority of APT attacks are usually aimed at government entities, telecoms firms or diplomats due them possessing highly valuable and confidential information in their day-to-day operations. Attacks on industry are rare but can be equally as devastating, according to the cybersecurity leaders, owing to such targetted attacks having disastrous consequences on businesses and markets. Because of this, once MontysThree was detected in the summer of 2020, the analysts as Kaspersky were quick to take note. To carry out this espionage, MontysThree deployed a malware program consisting of four modules. The first - the loader - was spread using self-extracted archives such as .rar files containing pertinent information like medical records to trick employees into downloading the files - a common technique using in phishing. The primary purpose of the loader is to ensure the malware isn’t detected. To do this, they employ a system known as steganography, the
act of hiding malicious data in an ordinary, non-threatening file or message. In this case, the data was hidden in a bitmap. The malware run by MontysThree uses several encryption techniques to remain undetected, namely the use of an RSA algorithm, typically used for secure data transmission. The algorithm used is specifically designed to target both Adobe and Microsoft files, while also being able to capture screenshots and “fingerprint” the target to see if it is of any use to the company. Denis Legezo, a senior security researcher with Kaspersky’s Global Research and Analysis Team, said: “MontysThree is interesting not just because of the fact that it’s targetting industrial holdings, but because of the combination of sophisticated and somewhat ‘amateurish’ TTPs. “In general, the sophistication varies from module to module, but it can’t compare to the level used by the most advanced APTs. However, they use strong cryptographic standards and there are indeed some tech-savvy decisions made, include custom steganography. “Perhaps, most importantly, it’s clear that the attackers have put significant effort into developing the MontysThree toolset, suggesting they are determined in their aims - and that this is not meant to be a short-lived campaign.” They offer and recommend companies providing staff with basic cybersecurity hygiene training, as many targetted attacks start with phishing scams or other such social engineering techniques. They also recommend setting up divisions with the latest threat intelligence software, as well as the implementation of EDR solutions for endpoint level detection. They also recommend firms protect both industrial and corporate endpoints, using specialist software designed to trace and reveal them. Learn more at: www.kaspersky.co.uk
LiBiao Launch Parcel Sorting Robots In Europe
C
hinese robotics company LiBiao has announced the release of their specialised parcel-sorting robots onto the European market with its “Mini Yellow” range of autonomous mobile robots (AMRs). The line has been specifically designed as a cost-effective and highly-efficient alternative to the high capital expenditure sortation devices that have traditionally been used as part of global busy parcel and e-commerce companies. They are actively seeking distribution partners to help them expand their markets in places such as the UK, France, Germany, Spain and Italy. 10 Industry Europe
Initially, two CE-certified models will be offered to Europe: the 5kg tilt-tray robot and a 30kg crossbelt model. The robots are far more compact than other AMR’s, with 350 models being able to cover an area of 1,300 square-miles supposedly at a throughput of 20,000 items per hour. LiBiao also provides the control software for the robots, which they claim operates the robots in a smooth and efficient manner. The Chinese roboteers also claim the software should be compatible with all modern European warehouse management systems. Due to their size, the Mini Yellows are quick and easy to set up and require minimal maintenance. The design requires no fixed infrastructure, therefore the modular system is scalable and more robots can be added as desired and the technology is fully portable, meaning technology can be switched and allocated between sites if necessary. So far 10,000 LiBiao robots are active across China, New Zealand, Australia, the USA and
South-East Asia and the technology has been deployed at a number of “blue-chip” client facilities worldwide, including Walmart in the US, Uniqlo in Japan and China Post in China. The company estimate that roughly 2 billion parcels are handled by their models per year. LiBiao Robot’s founder and chief executive, Xia Huiling, comments: “Demand for more efficient and smarter warehouse management is strong in Europe, where online shopping has been growing at a tremendous pace and driving up the number of parcels handled, so we believe that the market will benefit from our advanced mobile robot technology. “The hardware, software and management system for the ‘Mini Yellow’ sorting system has been refined to the point where our clients usually recover the cost of their investment within one and a half to two years. And, such are the high levels of customer satisfaction with ‘Mini Yellow’ technology, that some 70 per cent of the businesses that have introduced the system so far have become repeat customers.” Visit: www.lotsofbots.com/en/libiao-robotics
