Kaspersky researchers have identified a macOS variant of the HZ Rat backdoor targeting users of WeChat and DingTalk, two popular Chinese messaging platforms. The malware, first detected on Windows systems, now threatens macOS, potentially enabling [c]
The targeted region, and overlap in behavior and code, suggest the tool is used by the infamous North Korea-aligned APT group Lazarus. The backdoor can exfiltrate, overwrite, and remove files, execute commands, and obtain extensive information about the underlying system. The payload was uploaded to VirusTotal from South Korea, where some of the victims are located. [c]
ESET researchers discovered a previously unknown macOS backdoor that spies on users of compromised Macs and exclusively uses public cloud storage services to communicate back and forth with its operators. Named CloudMensis by ESET, its [c]
Kaspersky experts have brought to light a poorly detected SessionManager backdoor that was set up as a malicious module within the Internet Information Services (IIS), a popular web server edited by Microsoft. Once propagated, SessionManager enables [c]
Sophos has uncovered attackers using DLL side-loading to execute malicious code and install backdoors in the networks of targeted organizations. A new report published this week, “A New APT uses DLL Side-loads to Killl Someone,” [c]
Kaspersky researchers have uncovered a new method of distributing malware: under the guise of fake security certificates. When users attempt to enter an infected site, an iframe appears stating the site’s security certificate is out [c]
Analysing the activities of hacking group OceanLotus, known for campaigns targeting eastern Asia, security researchers at ESET have followed one of the group’s latest campaign. ESET’s research into the group, also known as APT32 or [c]
Copyright 2024 | aptantech