'Mercenary' hacker group runs rampant in Middle East, cybersecurity research shows

The report on the group, known publicly as Bahamut, the name assigned to the mythical sea monster of Arab lore, highlights how cybersecurity researchers are increasingly finding evidence of mercenaries online.

BlackBerrys vice president of research, Eric Milam, said the diversity of Bahamuts activities was such that he assumed it was working for a range of different clients.

Theres too many different things going on across too many different ranges and too many different verticals that it would be a single state, Milam said ahead of the reports release.

In June, Reuters reported on how an obscure Indian IT firm called BellTroX here offered its hacking services to help clients spy on more than 10,000 email accounts over seven years, including targeting prominent American investors.

Those apps, which included a fitness tracker and password manager, may have helped the hackers track their targets, the report said.

Milam declined to comment on who he thought might be behind Bahamut, but he said he hoped the report would help to sharpen the focus on hackers-for-hire.

One heavily targeted organization included the New York-based Sikhs for Justice, a separatist group thats campaigning for an independent homeland for Sikhs in India.

Its founder, Gurpatwant Singh Pannun, said his campaign websites have been repeatedly hacked and his emails broken into.
Others pursued by the hackers included: The United Arab Emirates Ministry of Defense, its Supreme Council for National Security, and Shaima Gargash, the Emirates No.

Original article