Posts of last few hours

Researchers have taken apart TASK#STOMP, a Windows backdoor that searches a victim’s drives for business documents, uploads them to attacker servers, and then stays put to grab each new or edited document. The same malware steals saved Wi-Fi passwords and clipboard text, takes screenshots, and runs whatever command its operators send. Akshay Gaikwad and Aaron Beardslee of Securonix Threat Research built their analysis from one infected machine, so Securonix cannot say how many organizations are … More →

The post The TASK#STOMP Windows backdoor takes Wi-Fi passwords, screenshots, and business files appeared first on Help Net Security.

NightEagle, an espionage-focused threat group also tracked as APT-Q-95, has expanded its operations from Asian targets to Russian organizations, using a layered intrusion chain that culminates in attempts to compromise Active Directory domain controllers. The campaign illustrates a familiar but dangerous enterprise compromise pattern: attackers do not need a novel zero-day exploit when exposed remote […]

The post NightEagle Uses BlueKeep and DCSync to Move Toward Active Directory Domain Controllers appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.