Malware News Noisy Bear Targets Kazakhstan Energy Sector With BarrelFire Phishing Campaign

[Captain Awesome]

Content source

https://thehackernews.com/2025/09/noisy-bear-targets-kazakhstan-energy.html?m=1

A threat actor possibly of Russian origin has been attributed to a new set of attacks targeting the energy sector in Kazakhstan.

The activity, codenamed Operation BarrelFire, is tied to a new threat group tracked by Seqrite Labs as Noisy Bear. The threat actor has been active since at least April 2025.

"The campaign is targeted towards employees of KazMunaiGas or KMG where the threat entity delivered a fake document related to the KMG IT department, mimicking official internal communication and leveraging themes such as policy updates, internal certification procedures, and salary adjustments," security researcher Subhajeet Singha said.

 

[Zero Knowledge]

Good servers in Kazakhstan . Sadly the only thing I associate Kazakhstan with is Borat