Remove DNS Remove Energy and Utilities Remove Surveillance
article thumbnail

IT threat evolution Q3 2021

SecureList

We have seen targeted attacks exploiting the vulnerability to target companies in research and development, the energy sector and other major industries, banking, the medical technology sector, as well as telecoms and IT. That library was then loaded by the legitimate MsMpEng.exe by utilizing the DLL side-loading technique.

Malware 129
article thumbnail

China-Nexus Nation State Actors Exploit SAP NetWeaver (CVE-2025-31324) to Target Critical Infrastructures

Security Boulevard

CL-STA-0048 Activity: Interactive Reverse Shell and DNS Beaconing on SAP Environments On April 28, 2025, EclecticIQ analysts observed command-and-control (C2) traffic originating from compromised SAP NetWeaver systems. Resolved IPs via DNS: Figure 7 - Resolved IP address in DNS A record. 53 at 08:49:00 AM. 54.77.139[.]23

DNS 52