backdoor Archives - AZGAD WEBSITE SECURITY BLOG

Thursday, April 25, 2024

Latest:

2021-01-11 Tara Seals

SolarWinds Hack Potentially Linked to Turla APT

Researchers have spotted notable code overlap between the Sunburst backdoor and a known Turla weapon.

Cloud Security Critical Infrastructure cyberespionage Dark Halo dns communications further exploitation Government government agency Hacks Kaspersky Malware second-stage solarwinds solorigate sunburst technical analysis telco UNC2452 Vulnerabilities Web Security

2020-12-18 Tara Seals

Sunburst’s C2 Secrets Reveal Second-Stage SolarWinds Victims

Examining the backdoor’s DNS communications led researchers to find a government agency and a big U.S. telco that were flagged for further exploitation in the spy campaign.

Cobalt Strike egregor Hacks Malware qbot ransomware ransomware attack ryuk socks5 proxy systembc Tor

2020-12-16 Lindsey O'Donnell

Ryuk, Egregor Ransomware Attacks Leverage SystemBC Backdoor

In the past few months researchers have detected hundreds of attempted SystemBC deployments globally, as part of recent Ryuk and Egregor ransomware attacks.

analysis apt Cloud Security Cloud Services cyber espionage Cybereason dropbook dropbox Facebook Malware Middle East molerats Phishing quasar rat sharpstage Web Security

2020-12-10 Tara Seals

MoleRats APT Returns with Espionage Play Using Facebook, Dropbox

The threat group is increasing its espionage activity in light of the current political climate and recent events in the Middle East, with two new backdoors.

advanced persistent threat Afghanistan apt CVE-2017-11882 CVE-2019-2215 Cyberattacks email Email credentials espionage everest Malware mediatek-su mobile security Nepal Phishing SideWinder Trend Micro Vulnerabilities Web Security

2020-12-09 Tara Seals

SideWinder APT Targets Nepal, Afghanistan in Wide-Ranging Spy Campaign

Convincing email-credentials phishing, emailed backdoors and mobile apps are all part of the groups latest effort against military and government targets.

advanced persistent threat apt DeathStalker espionage Hackers hackers for hire Kaspersky Malware Malware analysis obfuscation powerpepper steganography

2020-12-03 Tara Seals

DeathStalker APT Spices Things Up with PowerPepper Malware

A raft of obfuscation techniques turn the heat up for the hacking-for-hire operation.

apt Crutch cyberattack cyberespionage dropbox espionage Government Hacks Malware Ministry of Foreign Affairs PowerShell Empire Skipper implant Turla

2020-12-02 Lindsey O'Donnell

Turla’s ‘Crutch’ Backdoor Leverages Dropbox in Espionage Attacks

In a recent cyberattack against an E.U. country’s Ministry of Foreign Affairs, the Crutch backdoor leveraged Dropbox to exfiltrate sensitive documents.