A politically motivated hacker group tied to a series of espionage and sabotage attacks on Israeli entities in 2021 incorporated a previously undocumented remote access trojan (RAT) that masquerades as the Windows Calculator app as part of a conscious effort to stay under the radar.
Cybersecurity company Cybereason, which has been tracking the operations of the Iranian actor known as Moses Staff, dubbed the malware "StrifeWater."
"The StrifeWater RAT appears to be used in the initial stage of the attack and this stealthy RAT has the ability to remove itself from the system to cover the Iranian group's tracks," Tom Fakterman, Cybereason security analyst, said in a report. "The RAT possesses other capabilities, such as command execution and screen capturing, as well as the ability to download additional extensions."
Moses Staff came to light towards the end of last year when Check Point Research unmasked a series of attacks aimed at Israeli organizations since September 2021 with the objective of disrupting the targets' business operations by encrypting their networks, with no option to regain access or negotiate a ransom.
The intrusions were notable for the fact that they relied on the open-source library DiskCryptor to perform volume encryption, in addition to infecting the systems with a bootloader that prevents them from starting without the correct encryption key.
To date, victims have been reported beyond Israel, including Italy, India, Germany, Chile, Turkey, the U.A.E., and the U.S.
The new piece of the attack puzzle discovered by Cybereason comes in the form of a RAT that's deployed under the name "calc.exe" (the Windows Calculator binary) and is used during the early stages of the infection chain, only to be removed prior to the deployment of the file-encrypting malware.
The removal and the subsequent replacement of the malicious calculator executable with the legitimate binary, the researchers suspect, is an attempt on the part of the threat actor to cover up tracks and erase evidence of the trojan, not to mention enable them to evade detection until the final phase of the attack when the ransomware payload is executed.
StrifeWater, for its part, is no different from its counterparts and comes with numerous features, chief among them being the ability to list system files, execute system commands, take screen captures, create persistence, and download updates and auxiliary modules.
"The end goal for Moses Staff appears to be more politically motivated rather than financial," Fakterman concluded. "Moses Staff employs ransomware post-exfiltration not for financial gain, but to disrupt operations, obfuscate espionage activity, and to inflict damage to systems to advance Iran's geopolitical goals."
Continue reading- Install Pentest Tools Ubuntu
- How To Make Hacking Tools
- Nsa Hacker Tools
- What Are Hacking Tools
- Hacker Tools Free
- Hacking Apps
- Pentest Tools Online
- New Hacker Tools
- Hacking Tools 2019
- Pentest Tools Website Vulnerability
- Pentest Tools Url Fuzzer
- Hack Tools 2019
- Wifi Hacker Tools For Windows
- Hacker Tools For Pc
- Hacker Tools For Mac
- Best Pentesting Tools 2018
- Hacker Tools Free
- Hacking Tools Online
- Hacking Tools For Games
- Hacking Apps
- Hack Apps
- Hacker Tools Software
- Hacking Tools 2020
- Pentest Tools Framework
- Hack Tools For Mac
- Hacker Tools Online
- Easy Hack Tools
- Hack Tools
- Pentest Tools Subdomain
- Pentest Tools Subdomain
- Pentest Tools For Mac
- Pentest Tools Free
- Pentest Tools For Ubuntu
- Hacking Tools Online
- Hackers Toolbox
- Hack Tools For Windows
- Ethical Hacker Tools
- Tools Used For Hacking
- Pentest Tools Alternative
- Hacker Tools For Mac
- Pentest Tools For Windows
- Pentest Tools Open Source
- Hacking Tools Online
- Hacking Tools Windows 10
- Hacker Tools Free
- Pentest Tools For Android
- Hacker Tools For Mac
- Hacking Tools For Windows
- Hacker
- Hacking Tools Hardware
- Beginner Hacker Tools
- Hacker Tools For Mac
- Hacking Tools Free Download
- Hacker Tools Linux
- Hacker Hardware Tools
- Hacking Tools Usb
- Tools Used For Hacking
- Hack Tools 2019
- Hacking Tools Github
- Hack Tools Download
- Pentest Tools Open Source
- Hacking Tools Pc
- Hacking Tools For Kali Linux
- How To Install Pentest Tools In Ubuntu
- World No 1 Hacker Software
- Hacker Techniques Tools And Incident Handling
- Hacking Tools 2020
- Hacking Tools For Windows Free Download
- Hacking Tools For Mac
- Beginner Hacker Tools
- Pentest Tools Website
- Hack Tools Mac
- Hacking Apps
- Pentest Tools For Mac
- Hack Tools
- Hacking Tools Download
- Hack Tools Mac
- Hacking Tools Kit
- Blackhat Hacker Tools
- Blackhat Hacker Tools
- Usb Pentest Tools
- Hack And Tools
- Pentest Tools Framework
- Hacking Tools Usb
- Hacking Tools Github
- Hack Tools For Pc
- Pentest Tools Framework
- Hacking Tools 2020
- Hack Website Online Tool
- Pentest Tools Website
- Pentest Tools Review
- Pentest Tools For Ubuntu
- Computer Hacker
- Hacks And Tools
- Pentest Tools For Mac
- Hacker Tools Hardware
- Install Pentest Tools Ubuntu
- Pentest Tools Find Subdomains
- Hacking Tools Software
- Hacker Tools Apk
- Hack Tools 2019
- Hack Tools
- Hacking Tools Usb
- Pentest Tools Tcp Port Scanner
- Hacking Tools For Mac
- Nsa Hacker Tools
- Github Hacking Tools
- Nsa Hack Tools Download
- Hacking Tools Usb
- Hacker Tools Online
- Hack Tools Mac
- Hacking Tools Kit
- Pentest Tools List
- Tools For Hacker
- Hacking Tools Usb
- Pentest Tools Tcp Port Scanner
- Pentest Tools Find Subdomains
- Hack Tools Download
- Pentest Tools List
- Hack Tools For Games
- Easy Hack Tools
- Pentest Tools Online
- World No 1 Hacker Software
- Hacker Tools Free Download
- Hacker Tools For Mac
- Hackrf Tools
- Hacker Tools Mac
- Pentest Tools Online
- Beginner Hacker Tools
- Hacking Tools For Kali Linux
- Hack Tools For Games
- Pentest Tools Bluekeep
- Nsa Hacker Tools
- Hacking Tools
- Github Hacking Tools
- Pentest Tools Website Vulnerability
- Hack Rom Tools
- Hacker Tool Kit
- Hack Tools Online
- Hacking Tools For Windows Free Download
- Hacker Tools 2019
- Pentest Tools For Mac
- Android Hack Tools Github
- Ethical Hacker Tools
- Hacker Tools Github
- Hack Tools Mac
- Hacker Tools Hardware
- Hacking Tools For Windows Free Download
- Hacking Tools Hardware
- Hack Tool Apk
- Hacking Tools For Pc
- Pentest Tools Github
- Underground Hacker Sites
- Hacking Tools For Beginners
- Hacking Tools Kit
- Pentest Tools Kali Linux
- Hacking Tools Pc
- Hackers Toolbox
- Pentest Tools Url Fuzzer
- Pentest Tools List
- Hacker Tools Free Download
- New Hacker Tools
- Hacking Tools Hardware
- Hacking Tools Name
- Easy Hack Tools
- Hacker Tools Online
- Hacker Techniques Tools And Incident Handling
- Pentest Automation Tools
- Hacker Tools
- Best Hacking Tools 2019
- Pentest Tools List
- Hacker Tools Apk
- Hacking Tools Pc
- Hacking Tools Free Download
- Free Pentest Tools For Windows
- Best Hacking Tools 2019
No comments:
Post a Comment