Precursor Intelligence
Threat News
Latest cyber threat intelligence, breaches and exploitation
3 matching stories
APTKaspersky Unveils Armored Likho APT Using BusySnake Stealer Against Russian, Brazilian, and Kazakh Government and Critical Infrastructure
Kaspersky has identified a new APT group, Armored Likho, running a multi-stage spear-phishing campaign that drops a previously undocumented Python infostealer called BusySnake Stealer to steal credentials, browser data, and documents from government and critical infrastructure targets in Russia, Brazil, and Kazakhstan.
HoneyMyte adds kernel-mode rootkit to CoolClient backdoor
HoneyMyte (Mustang Panda) APT has upgraded its CoolClient backdoor with a new Windows kernel-mode rootkit, Msagent.sys, that provides process hiding, file hiding, registry hiding, and network data filtering for deeper persistence and stealth in targeted intrusions across Asia and Russia.
Head Mare APT trojanizes TrueConf client installers to drop PhantomCore and PhantomGraph backdoors
Head Mare APT is exploiting an unpatched TrueConf video conferencing server to trojanize the client installer and deliver PhantomCore and PhantomGraph backdoors to Russian organizations across six sectors.
