SoylentNews is people
SoylentNews
Arthur T Knackerbracket has found the following story:
The APT known as TA410 has added a modular remote-access trojan (RAT) to its espionage arsenal, deployed against Windows targets in the United States’ utilities sector.
According to researchers at Proofpoint, the RAT, called FlowCloud, can access installed applications and control the keyboard, mouse, screen, files, services and processes of an infected computer, with the ability to exfiltrate information to a command-and-control (C2) provider. It appears to be related to previous attacks delivering the LookBack malware.
The RAT first scurried onto the scene last summer as part of a spear-phishing campaign. Utility providers received training- and certification-related emails with subject lines such as “PowerSafe energy educational courses (30-days trial),” containing portable executable (PE) attachments, according to a Monday Proofpoint analysis.
To make the effort more convincing, the threat actor-controlled domains that delivered the emails impersonated energy-sector training services, and used subdomains which contained the word “engineer.”
[APT - Advanced Persistent Threat]
(Score: 4, Informative) by looorg on Wednesday June 10 2020, @06:39PM (2 children)
Not only in network utilities, I always giggle a bit to myself as I see some system that has crashed -- be it information screens or an ATM -- and you can see that it's running some version of windows.
(Score: 2) by PartTimeZombie on Wednesday June 10 2020, @09:42PM (1 child)
The Register does a series on those sorts of crashes called borkborkbork! which is quite fun.
(Score: 3, Funny) by c0lo on Thursday June 11 2020, @09:21AM
I think you mistake El Reg for the Swedish chef: a single bork, not 3 [theregister.com]
https://www.youtube.com/watch?v=aoFiw2jMy-0 https://soylentnews.org/~MichaelDavidCrawford