Remove 04
Remove 2015 Remove Analysis Remove Data Remove Government Remove Security
article thumbnail

Lampion malware origin servers geolocated in Turkey

Security Affairs

From December 2019 it had spread, impersonating and using template emails from the Portuguese Government Finance & Tax (Portal das Finanças – ATA) , Energias de Portugal (EDP) , and most recently DPD firm – an international parcel delivery service. Copyright (C) 2014-2015 Media.net Advertising FZ-LLC All Rights Reserved -->.

article thumbnail

Cyber Threats Observatory Gets Improvements

Security Affairs

Due to a vast amount of data, only the last (in term of recent) 10000 entries are included. According with any.run: Lokibot, also known as Loki-bot or Loki bot, is an information stealer malware that collects data from most widely used web browsers, FTP, email clients and over a hundred software tools installed on the infected machine.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

MuddyWater APT group updated its multi-stage PowerShell backdoor Powerstats

Security Affairs

Security experts at Trend Micro report that the MuddyWater APT group (aka SeedWorm and TEMP.Zagros ), has used an updated multi-stage PowerShell backdoor in recent cyber espionage campaigns. “One of the campaigns sent spear-phishing emails to a university in Jordan and the Turkish government. ” continues the analysis.

IT 59
article thumbnail

Iran-linked APT34: Analyzing the webmask project

Security Affairs

Security expert Marco Ramilli published the findings of a quick analysis of the webmask project standing behind the DNS attacks implemented by APT34 (aka OilRig and HelixKitten ). The group conducts operations primarily in the Middle East, targeting financial, government, energy, chemical, telecommunications and other industries.