The Attor malware comes with some unusual capabilities including the use of encrypted modules, Tor-based communications, and a plugin designed for GSM fingerprinting.
The Iranian state-sponsored hackers Charming Kitten employed new spear-phishing methods in a campaign observed in August and September.
It is estimated that more than 6,500 sites are affected, that number could be even higher.
The new campaign exploits the vulnerability through a .GIF file that contains a malicious code.
The malware doesn’t carry out man-in-the-middle attacks, it infects the browser itself.
The PKPLUG group has been using a variety of malware in a series of espionage campaigns across Southeast Asia since at least 2013.
The Geost botnet infected more than 800,000 Android devices and potentially accessed several millions Euros in the bank accounts of the victims.
The malware is distributed via a malspam campaign with the spam messages containing malicious attachments or URL redirecting to malicious payloads.
The recent eGobbler campaign expanded its targeting to desktop browsers and users in European countries.
An initial foothold into victims’ systems is achieved with the help of modified version of the open-source PcShare backdoor, specifically tailored to the needs of the campaign.
Showing elements 4091 - 4100