article thumbnail

Stealth Falcon’s undocumented backdoor uses Windows BITS to exfiltrate data

Security Affairs

Stealth Falcon is a nation-state actor active since at least 2012, the group targeted political activists and journalists in the Middle East in past campaigns. In 2016, researchers from non-profit organization CitizenLab published a report that describes a campaign of targeted spyware attacks carried by the Stealth Falcon.

Malware 85
article thumbnail

Security Affairs newsletter Round 235

Security Affairs

Amnesty claims that 2 Morocco rights advocates were targeted by NSO Group spyware. Ops, popular iTerm2 macOS Terminal App is affected by a critical RCE since 2012. Sophos fixed a critical vulnerability in Cyberoam firewalls. Attor malware was developed by one of the most sophisticated espionage groups.

VPN 54
article thumbnail

Advanced threat predictions for 2023

SecureList

In 2022, the GReAT team tracked several threat actors leveraging SilentBreak’s toolset as well as a commercial Android spyware we named MagicKarakurt. CobaltStrike, released in 2012, is a threat emulation tool designed to help red teams understand the methods an attacker can use to penetrate a network.

Firmware 117