Google-owned Mandiant said it identified new malware employed by a China-nexus espionage threat actor known as UNC5221 and other threat groups during post-exploitation activity targeting Ivanti Connect Secure VPN and Policy Secure devices.
This includes custom web shells such as BUSHWALK, CHAINLINE, FRAMESTING, and a variant of LIGHTWIRE.
“CHAINLINE is a Python web shell backdoor that is
Related Post
- November 26, 2024
CISA Urges Agencies to Patch Critical “Array Networks”
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched critical security flaw impacting Array Networks AG
- November 25, 2024
FlipaClip animation app data breach exposes details of
Graham CLULEY November 25, 2024 Promo Protect all your devices, without slowing them down. Free 30-day trial Flipaclip, an animation
- November 25, 2024
Google’s New Restore Credentials Tool Simplifies App Login
Google has introduced a new feature called Restore Credentials to help users restore their account access to third-party apps securely
- November 25, 2024
PyPI Python Library “aiocpa” Found Exfiltrating Crypto Keys
The administrators of the Python Package Index (PyPI) repository have quarantined the package “aiocpa” following a new update that included