Tag: C2

Kaspersky identifies implants used by adversaries for uploading data against industrial organizations

Kaspersky identifies implants used by adversaries for uploading data against industrial organizations

Researchers from the Kaspersky ICS CERT team published the third and final part of its research based on an investigation of a series of attacks against industrial organizations in Eastern Europe. In total, the researchers detected over 15 implants and…

SideCopy APT group uses ReverseRAT backdoor to target Indian government agencies, ThreatMon reports

SideCopy APT group uses ReverseRAT backdoor to target Indian government agencies, ThreatMon reports

ThreatMon researchers provided details of SideCopy, a Pakistani threat group, having targeted Indian government entities using a spear-phishing email containing a macro-enabled Word document. The malware used is a new version of ReverseRAT, which has enhanced obfuscation and sleep calls…

Mandiant detects suspected Chinese BOLDMOVE hackers exploiting FortiOS vulnerability across federal entities

Mandiant detects suspected Chinese BOLDMOVE hackers exploiting FortiOS vulnerability across federal entities

Threat intelligence firm Mandiant disclosed that it is tracking a suspected China-nexus campaign called ‘BOLDMOVE’ believed to have exploited a recently announced vulnerability in Fortinet's FortiOS SSL-VPN, CVE-2022-42475, as a zero-day. Evidence suggests the exploitation was occurring as early as…

Lazarus APT group exploits Log4j vulnerability on exposed VMware Horizon servers to target energy firms

Lazarus APT group exploits Log4j vulnerability on exposed VMware Horizon servers to target energy firms

Researchers at Cisco Talos have been tracking a new campaign operated by the Lazarus advanced persistent threat (APT) group, attributed to North Korea by the U.S. government. Between February and July this year, the group is said to have exploited…

critical infrastructure cybersecurity

Critical infrastructure cybersecurity future may be blend of mandatory regulations, voluntary frameworks

OT cybersecurity company Mission Secure expects the future of critical infrastructure cybersecurity to be a mix of mandatory regulations and voluntary frameworks, as governments continue to pay attention to cybersecurity until the threat and risk are reduced. Operations across critical…