Cybercriminals are sending “decorative gift boxes” to unsuspecting businesses containing Lily Go USB flash drives that are installing ransomware on targeted devices.
The US Federal Bureau of Investigation, FBI, has released a warning to inform enterprises about malicious USB flash drives sent through the mail to spread ransomware and launch cyberattacks.
As per the FBI, the package comes as a “decorative gift box containing a fraudulent thank you letter, counterfeit gift card, and a USB.”
Details of the Scam
The FBI has warned that the infamous cybercrime group FIN7 is sending shady gifts to different US firms. The package is disguised as sent by the US Department of Health & Human Services or Amazon to deceive the recipient into using the suspicious package.
The packages contain USB flash drives that contain malware. The packages also include a letter providing details of COVID-19 guidelines supposedly issued by the department or Amazon online gift cards.
According to reports, the FBI states that the infected USB