RomCom Cyber Campaign Targets Women Political Leaders

A threat group known as Void Rabisu used a spoofed Women Political Leaders Summit website to target attendees to the actual conference with espionage malware.

Attendees of Augusts Women Political Leaders Summit 2023 conference found themselves targeted by a spoofed event website loaded with a new cyber espionage malware variant called ROMCOM 4.0.
Leaders from all over the world attended the conference to explore the role of women in politics as well as prospects for peace in Ukraine. Specifically, the cyber espionage campaign targeted those helping to further gender equality in the European Union, according to
a report from Trend Micro
.
Just a year ago, Void Rabisu threat group was a a run-of-the-mill
ransomware
outfit, but the invasion of Ukraine offered an opportunity for the cybercriminals to get in on more nation-state, advanced persistent threat (APT) action, the Trend Micro report explained.
The groups primary malware strain has been updated to a new version, ROMCOM 4.0, and is used primarily to target politicians, the military, and government employees, Trend Micro observed.
While we have no evidence that Void Rabisu is nation-state-sponsored, its possible that it is one of the financially motivated threat actors from the criminal underground that got pulled into cyberespionage activities due to the
extraordinary geopolitical circumstances caused by the war in Ukraine
, the report added.

Last News
▸ ArcSight prepares for future at user conference post HP acquisition. ◂ Discovered: 07/01/2025 Category: security	▸ Samsung Epic 4G: First To Use Media Hub ◂ Discovered: 07/01/2025 Category: security	▸ Many third-party software fails security tests ◂ Discovered: 07/01/2025 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
RomCom Cyber Campaign Targets Women Political Leaders