Remove 2010 Remove File names Remove Financial Services Remove IT
article thumbnail

China-linked Budworm APT returns to target a US entity

Security Affairs

The China-linked APT27 group has been active since 2010, it targeted organizations worldwide, including U.S. defense contractors , financial services firms, and a national data center in Central Asia. “In some cases, the HyperBro backdoor was loaded with its own HyperBro loader (file names: peloader.exe, 12.exe).

article thumbnail

Emissary Panda updated its weapons for attacks in the past 2 years

Security Affairs

The Emissary Panda APT (aka LuckyMouse , APT27, Threat Group 3390, and Bronze Union) has been active since 2010, targeted organizations worldwide, including U.S. defense contractors , financial services firms, and a national data center in Central Asia. ” states the report published by Secureworks. Windows NT 6.3;

IT 84