A politically motivated hacker group tied to a series of espionage and sabotage attacks on Israeli entities in 2021 incorporated a previously undocumented remote access trojan (RAT) that masquerades as the Windows Calculator app as part of a conscious effort to stay under the radar.
Cybersecurity company Cybereason, which has been tracking the operations of the Iranian actor known as Moses Staff, dubbed the malware "StrifeWater."
"The StrifeWater RAT appears to be used in the initial stage of the attack and this stealthy RAT has the ability to remove itself from the system to cover the Iranian group's tracks," Tom Fakterman, Cybereason security analyst, said in a report. "The RAT possesses other capabilities, such as command execution and screen capturing, as well as the ability to download additional extensions."
Moses Staff came to light towards the end of last year when Check Point Research unmasked a series of attacks aimed at Israeli organizations since September 2021 with the objective of disrupting the targets' business operations by encrypting their networks, with no option to regain access or negotiate a ransom.
The intrusions were notable for the fact that they relied on the open-source library DiskCryptor to perform volume encryption, in addition to infecting the systems with a bootloader that prevents them from starting without the correct encryption key.
To date, victims have been reported beyond Israel, including Italy, India, Germany, Chile, Turkey, the U.A.E., and the U.S.
The new piece of the attack puzzle discovered by Cybereason comes in the form of a RAT that's deployed under the name "calc.exe" (the Windows Calculator binary) and is used during the early stages of the infection chain, only to be removed prior to the deployment of the file-encrypting malware.
The removal and the subsequent replacement of the malicious calculator executable with the legitimate binary, the researchers suspect, is an attempt on the part of the threat actor to cover up tracks and erase evidence of the trojan, not to mention enable them to evade detection until the final phase of the attack when the ransomware payload is executed.
StrifeWater, for its part, is no different from its counterparts and comes with numerous features, chief among them being the ability to list system files, execute system commands, take screen captures, create persistence, and download updates and auxiliary modules.
"The end goal for Moses Staff appears to be more politically motivated rather than financial," Fakterman concluded. "Moses Staff employs ransomware post-exfiltration not for financial gain, but to disrupt operations, obfuscate espionage activity, and to inflict damage to systems to advance Iran's geopolitical goals."
Read more
- Pentest Tools Alternative
- Hacking Tools For Games
- Pentest Tools Alternative
- Game Hacking
- What Is Hacking Tools
- Pentest Tools Windows
- Hacking Tools Name
- Hacker Tools For Pc
- Hacker Tools For Ios
- Termux Hacking Tools 2019
- Hack Tools Github
- Game Hacking
- Hacking App
- Hack App
- Hacking Tools For Windows
- Pentest Tools Apk
- Hacker Tools For Pc
- Hacker Tools
- Hack App
- Hacking Tools Github
- How To Hack
- Hacking Tools For Windows Free Download
- Nsa Hack Tools
- Github Hacking Tools
- Pentest Tools Website Vulnerability
- Pentest Box Tools Download
- Hacking Tools For Mac
- Hacker Tools For Ios
- Hacker Tools 2019
- Hacker Tools Free Download
- Hacking Tools For Windows 7
- How To Hack
- Hack Tools For Games
- Pentest Tools Linux
- Pentest Reporting Tools
- Hacking Tools Download
- Hacker Tools Apk Download
- Hacker Techniques Tools And Incident Handling
- New Hacker Tools
- Pentest Tools Bluekeep
- How To Hack
- Hacker Tools Mac
- Hacking Tools Name
- Pentest Tools For Windows
- Pentest Tools Download
- Hacker Tools
- Nsa Hack Tools Download
- Hacker Tools Apk Download
- Hack And Tools
- Hacking Tools Software
- Hacking Tools For Windows Free Download
- Hacking Apps
- Android Hack Tools Github
- Pentest Reporting Tools
- Hack Tools 2019
- Hacking Tools 2019
- Hacking Tools 2020
- Pentest Tools Android
- Hacking Tools For Windows
- Pentest Automation Tools
- Hack Tools For Windows
- Hack Tools For Games
- Free Pentest Tools For Windows
- Best Hacking Tools 2019
- Hacking Tools
- What Are Hacking Tools
- Hacker Tools Free Download
- Pentest Tools Kali Linux
- Hacking Tools Windows 10
- Pentest Tools Windows
- Hacker Tools For Windows
- Pentest Tools Online
- Pentest Tools Subdomain
- Hack App
- Pentest Tools
- Pentest Tools For Windows
- Pentest Tools Open Source
- Hacker Tools For Ios
- Hackrf Tools
- Hacker Tool Kit
- Tools 4 Hack
- Hackers Toolbox
- Tools For Hacker
- Pentest Recon Tools
- Wifi Hacker Tools For Windows
- Hacking App
- Pentest Tools Kali Linux
- Pentest Tools
- Hack Tools Github
- Hacking Tools For Games
- Pentest Tools Linux
- Pentest Tools Online
- Hack App
- Hacker Tools List
- Hack Apps
- Nsa Hack Tools Download
- Computer Hacker
- Nsa Hack Tools Download
- Hacker Tools
- Beginner Hacker Tools
- Pentest Tools Website Vulnerability
- Pentest Tools Online
- Hack Tools For Mac
- Hacker Tools 2020
- Hacker Tools For Pc
- How To Install Pentest Tools In Ubuntu
- Pentest Tools Framework
- Hacking Tools Pc
- Black Hat Hacker Tools
- Hacking Tools For Beginners
- Hacker Tools For Windows
- Pentest Tools Find Subdomains
- Pentest Tools Kali Linux
- Hacker Tools Apk
- Pentest Tools Subdomain
- Free Pentest Tools For Windows
- Hack Tools
- Hacking Tools For Games
- How To Hack
- Hacker Search Tools
- Beginner Hacker Tools
- Hacker Tools List
- Physical Pentest Tools
- Pentest Tools Free
- Hacking App
- Pentest Tools Website Vulnerability
- Hack Tool Apk
- Pentest Box Tools Download
- Hack Apps
- Hacking App
- Hack Tools
- Best Hacking Tools 2020
- What Is Hacking Tools
- Hacker Tools For Mac
- Termux Hacking Tools 2019
- How To Install Pentest Tools In Ubuntu
- Hack Tools For Games
- Pentest Tools Url Fuzzer
- Hacker Tools Hardware
- Pentest Tools For Windows
- Tools 4 Hack
- Usb Pentest Tools
- New Hack Tools
- Hack Tools 2019
- Hacking Tools Download
- Android Hack Tools Github
- Hacking Tools Hardware
- Pentest Tools For Ubuntu
- Hackers Toolbox
- Hacking App
- Install Pentest Tools Ubuntu
- Pentest Tools Alternative
- Hack Tools For Pc
- Hak5 Tools
- Hacking Tools Windows
- Hacking Tools Free Download
- Hacker Search Tools
- Hacking Tools For Pc
- Hacker Tools For Windows
- Hacking Tools For Games
- Hacker Security Tools
- Hack Tools Download
- Game Hacking
- Pentest Tools Open Source
- Hack App
- How To Hack
No comments:
Post a Comment