article thumbnail

CISA’s MAR warns of North Korean BLINDINGCAN RAT

Security Affairs

The US Cybersecurity and Infrastructure Security Agency (CISA) has published a Malware Analysis Report (MAR) that includes technical details about a new strain of malware, tracked as BLINDINGCAN, that was attributed to North Korea. ” reads the CISA’s MAR report. In April, the U.S.

article thumbnail

North Korea-linked Lazarus APT targets the IT supply chain

Security Affairs

The BlindingCan was employed in attacks on US and foreign companies operating in the military defense and aerospace sectors. The CISA MAR provided indicators of compromise (IoCs), Yara rules, and other technical info that could be used by system administrators to discover compromise systems within their networks.

IT 97
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Canadian Police Raid ‘Orcus RAT’ Author

Krebs on Security

Rezvesz maintains his software was designed for legitimate use only and for system administrators seeking more powerful, full-featured ways to remotely manage multiple PCs around the globe. 2017 analysis of the RAT. This makes it harder for targets to remove it from their systems.

Marketing 220
article thumbnail

£60 million in recovery costs for Norsk Hydro after refusing ransom demand

IT Governance

On 19 March 2019, Norsk Hydro’s systems were infected with the LockerGoga ransomware. TrendMicro’s analysis into the ransomware found that it was the same system administration tool abused by the likes of SOREBRECT and Bad Rabbit. How the incident occurred. Everything in the company was turned upside down.”.