Zebrocy Retools for New Political Attacks
Researchers warn that the Russia-linked APT has freshened up their tools with an improved downloader and more. Continue reading Zebrocy Retools for New Political Attacks
Category Archives: Sednit
First-Ever UEFI Rootkit Tied to Sednit APT
Researcher at ESET outlines research on the first successful UEFI rootkit used in the wild. Continue reading First-Ever UEFI Rootkit Tied to Sednit APT
Russian Hacker Group APT28 Used UEFI Rootkit on Select Targets
Security researchers have found malicious versions of the LoJack anti-theft software on computers belonging to government agencies from the Balkans and Central and Eastern Europe. They attribute the attacks to the a notorious Russian cyberespionage gr… Continue reading Russian Hacker Group APT28 Used UEFI Rootkit on Select Targets
Sofacy APT Adopts New Tactics and Far East Targets
A new analysis of the Russian-speaking Sofacy APT gang shows a continual march toward Far East targets and overlapping of activities with other groups such as Lamberts, Turla and Danti. Continue reading Sofacy APT Adopts New Tactics and Far East Targets
New Mac malware pinned on same Russian group blamed for election hacks
Xagent for Macs steals passwords, grabs screenshots, and exfiltrates iPhone backups. Continue reading New Mac malware pinned on same Russian group blamed for election hacks
Who helped Russia “hack” the US election? It might have been you…
As the United States kicks out 35 Russian intelligence officers after alleged election-related hacks, there are clear lessons that businesses and internet users can learn to make life harder for the attackers next time.
Continue reading Who helped Russia “hack” the US election? It might have been you…
Microsoft Says Russian APT Group Behind Zero-Day Attacks
Microsoft said Russian APT group Sofacy, which has ties to the country’s military intelligence operations, has been using Windows kernel and Adobe Flash zero day vulnerabilities in targeted attacks. Continue reading Microsoft Says Russian APT Group Behind Zero-Day Attacks
Lifting the lid on Sednit: A closer look at the software it uses
ESET malware researchers have taken a closer look at the software used by Sednit to spy on its targets and steal confidential information.
Read more in my article on the We Live Security blog.
Continue reading Lifting the lid on Sednit: A closer look at the software it uses
New ESET research paper puts Sednit under the microscope
Researchers have released their latest research into the notorious Sednit cyberespionage group, which has targeted over 1000 high profile individuals with phishing attacks and zero-day exploits in their attempts to steal confidential information.
Read … Continue reading New ESET research paper puts Sednit under the microscope
Aerospace industry warned of targeted attacks from the Komplex OS X trojan
The Sofacy hacking group (also known as APT28, Sednit, and Fancy Bear) has developed a new trojan called ‘Komplex’ to help it target OS X users.
David Bisson reports.
Continue reading Aerospace industry warned of targeted attacks from the Komplex OS X trojan