Remove 2007 Remove Analysis Remove Encryption Remove Military
article thumbnail

New Turla ComRAT backdoor uses Gmail for Command and Control

Security Affairs

Earlier versions of Agent.BTZ were used to compromise US military networks in the Middle East in 2008. Despite their extensions, the attachments are not Office documents, but rather encrypted blobs of data that include a specific command to be executed.

article thumbnail

Latest Turla backdoor leverages email PDF attachments as C&C mechanism

Security Affairs

Malware researchers from ESET have conducted a new analysis of a backdoor used by the Russia-linked APT Turla in targeted espionage operations. The new analysis revealed a list of high-profile victims that was previously unknown. ” reads the analysis published by ESET. ” reads the analysis published by ESET.

article thumbnail

APT28 and Upcoming Elections: evidence of possible interference

Security Affairs

Technical Analysis. This Office password protection could be easily bypassed using the classic malware analysis tools and after the code extraction, it’s possible to analyze the plain-text code as follows. Further detail about AMSI have been described in a previous analysis report. Figure 1: Overview of the malicious document.