The private businesses being hit include those in the aviation, energy, financial and publishing industries.
The cybergang behind the Patchwork, aka Dropping Elephant, cyberespionage campaign has expanded its reach outside of government organizations and is now hitting the private sector and it manages to cause problems even if the target does not click on the malicious link.
Symantec reported this campaign became active at the latest in November 2015, and possibly several months earlier, when it mainly targeted government and government-related groups with trojan-laced spam emails. It was originally disclosed by Kaspersky Lab in early July.
While Patchwork has maintained its interest in public sector groups, it recently added a new sector, private businesses, to include those in aviation, energy, financial and publishing industries. About half the attacks have taken place