The threat group tracked as REF2924 has been observed deploying previously unseen malware in its attacks aimed at entities in South and Southeast Asia.
The malware, dubbed NAPLISTENER by Elastic Security Labs, is an HTTP listener programmed in C# and is designed to evade “network-based forms of detection.”
REF2924 is the moniker assigned to an activity cluster linked to attacks against an entity
Related Post
- November 22, 2024
Friday Squid Blogging: Transcriptome Analysis of the Indian
Lots of details that are beyond me. Blog moderation policy.
- November 22, 2024
APT-K-47 Uses Hajj-Themed Lures to Deliver Advanced Asyncshell
The threat actor known as Mysterious Elephant has been observed using an advanced version of malware called Asynshell. The attack
- November 22, 2024
Russian Hackers Deploy HATVIBE and CHERRYSPY Malware Across
Threat actors with ties to Russia have been linked to a cyber espionage campaign aimed at organizations in Central Asia,
- November 22, 2024
China-Linked TAG-112 Targets Tibetan Media with Cobalt Strike
A China-linked nation-state group called TAG-112 compromised Tibetan media and university websites in a new cyber espionage campaign designed to