Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 18 submissions in the queue.
posted by Fnord666 on Wednesday June 10 2020, @06:04PM   Printer-friendly
from the playing-in-the-energy-sector dept.

Arthur T Knackerbracket has found the following story:

The APT known as TA410 has added a modular remote-access trojan (RAT) to its espionage arsenal, deployed against Windows targets in the United States’ utilities sector.

According to researchers at Proofpoint, the RAT, called FlowCloud, can access installed applications and control the keyboard, mouse, screen, files, services and processes of an infected computer, with the ability to exfiltrate information to a command-and-control (C2) provider. It appears to be related to previous attacks delivering the LookBack malware.

The RAT first scurried onto the scene last summer as part of a spear-phishing campaign. Utility providers received training- and certification-related emails with subject lines such as “PowerSafe energy educational courses (30-days trial),” containing portable executable (PE) attachments, according to a Monday Proofpoint analysis.

To make the effort more convincing, the threat actor-controlled domains that delivered the emails impersonated energy-sector training services, and used subdomains which contained the word “engineer.”

[APT - Advanced Persistent Threat]


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by DannyB on Thursday June 11 2020, @04:15PM

    by DannyB (5839) Subscriber Badge on Thursday June 11 2020, @04:15PM (#1006369) Journal

    Don't blame the engineers.

    Good decisions usually work their way from the bottom up through an organization.
    While bad decisions work their way from the management down through an organization.

    Take off your engineer hat and put on your management hat. Look, we could save the cost of an entire machine. A single Windows 95 desktop could run the physical machine hardware, but also could be connected to the internet and run an email server.

    --
    A 'midden heap' is a reserved area of memory that the Java GC simply refuses to service.
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2