Antivirus DNS Social Engineering Telecommunications 
SecureList
JUNE 2, 2022
It primarily goes after targets located in China, such as foreign diplomatic organizations established in the country, members of the academic community, or companies from the defense, logistics and telecommunications sectors. Full control over the DNS, meaning they can provide responses for non-existent domains. WinDealer samples.
SecureList
APRIL 27, 2021
Although Lyceum still prefers taking advantage of DNS tunneling, it appears to have replaced the previously documented.NET payload with a new C++ backdoor and a PowerShell script that serve the same purpose. The victims we observed were all high-profile Tunisian organizations, such as telecommunications or aviation companies.
Expert insights. Personalized for you.
118 
Let's personalize your content