Ancient ICEFOG APT malware spotted again in new wave of attacks

guest · Jun 7, 2019

Ancient ICEFOG APT malware spotted again in new wave of attacks
ICEFOG malware resurfaces in the arsenal of multiple Chinese cyber-espionage groups, not just one
June 7, 2019
https://www.zdnet.com/article/ancient-icefog-apt-malware-spotted-again-in-new-wave-of-attacks/

Malware developed by Chinese state-sponsored hackers that was once thought to have disappeared has been recently spotted in new attacks, in an updated and more dangerous form.
Spotted by FireEye senior researcher Chi-en (Ashley) Shen, the malware is named ICEFOG (also known as Fucobha).
NEW ICEFOG VERSIONS DISCOVERED
Both ICEFOG strains were superior to the original ICEFOG malware sighted back in hacking campaigns in the early 2010s, suggesting that additional development has been done to bolster their capabilities.
ICEFOG USED FOR CYBER-ESPIONAGE PREDOMINANTLY
"From my observation, most samples were [used] for political espionage and intelligence gathering," Shen told ZDNet.
As to why new ICEFOG sightings haven't been reported, Shen also has a theory, suggesting that the malware wasn't detected because it very rarely used.
Click to expand...

Shen presented her findings at the CONFidence security conference that was held in Krakow, Poland, earlier this week. A copy of her presentation slides is available on SpeakerDeck.
Click to expand...

Log in or Sign up

Ancient ICEFOG APT malware spotted again in new wave of attacks

guest Guest

Log in or Sign up

Ancient ICEFOG APT malware spotted again in new wave of attacks

guest Guest

Useful Searches