Tarnkappe.infoDec 29
📬 Evasive Panda ändert das DNS, statt Updates lädt man Malware
#Cyberangriffe #ITSicherheit #Daggerfly #dictionarycom #DNSPoisoning #EvasivePanda #MgBot #Riskware #Sohuva https://sc.tarnkappe.info/42ae14
Evasive Panda ändert das DNS, statt Updates lädt man Malware

Die Hacker-Gruppe Evasive Panda nutzte das Domain Name System, um unzählige Computer zu verseuchen. Das DNS ist elementar und keine Beilage.

TARNKAPPE.INFO
The Threat CodexFeb 5, 2025
Analyzing ELF/Sshdinjector.A!tr with a Human and Artificial Analyst
#Daggerfly
https://www.fortinet.com/blog/threat-research/analyzing-elf-sshdinjector-with-a-human-and-artificial-analyst
Analyzing ELF/Sshdinjector.A!tr with a Human and Artificial Analyst | FortiGuard Labs

FortiGuard Labs reverse engineers a malware’s binaries to look into what the malware is actually doing.…

Fortinet Blog
The Threat CodexDec 5, 2024
U.S. Organization in China Targeted by Attackers
#Daggerfly
https://www.security.com/threat-intelligence/us-china-espionage
U.S. Organization in China Targeted by Attackers

Large U.S. organization was the subject of a four-month-long intrusion by China-based attackers.

The Threat CodexJul 23, 2024
Daggerfly: Espionage Group Makes Major Update to Toolset
#Daggerfly #Macma #Trojan.Suzafk #MgBot
https://symantec-enterprise-blogs.security.com/threat-intelligence/daggerfly-espionage-updated-toolset
Daggerfly: Espionage Group Makes Major Update to Toolset

APT group appears to be using a shared framework to create Windows, Linux, macOS, and Android threats.