APT-C-23 has Re-Emerged on the Front Scene

mood · May 19, 2020

APT-C-23 has Re-Emerged on the Front Scene with “Mygram” Hacks
May 18, 2020
https://www.technadu.com/apt-c-23-re-emerged-front-scene-mygram-hacks/102145/

Researchers from the “360 Threat Intelligence Center” have caught APT-C-23 activity on their radars, and are now reporting about their findings in detail. The hacking group, which is also known as “Two-Tailed Scorpion”, has been targeting the Israel Defense Forces (IDF) since February 2020, using an instant message app called “Mygram” as a bait.

The website that distributes “Mygram IM” is well-crafted, containing detailed descriptions of the features of the chat app, and thus it’s pretty convincing.
Thus, the website is fabricated, but not obviously.

The malware is also capable of receiving Firebase Cloud Messaging commands and functions encoded with Base64. As the researchers point out, the actors are using multiple different spyware versions on their campaigns, switching from one method to the other. However, everything features the same or at least similar code structure.
Click to expand...

We have seen Hamas hackers targeting Israeli soldiers with fake IM apps and nicely crafted phishing messages back in February, and the latest reports about the APT-C-23 activity coincide with that time period. The apps that were used then had the names “GrixyApp,” “ZatuApp,” and “Catch&See”, and they were all distributed via nicely crafted phishing websites.

Thus, we can now safely assume that APT-C-23 was behind these attacks too.
Click to expand...

Log in or Sign up

APT-C-23 has Re-Emerged on the Front Scene

mood Updates Team

New attack tied to Higaisa APT discovered

ACSC Releases Cyber Criminal and APT Tradecraft Trends for 2019-2020

Naikon APT Hid Five-Year Espionage Attack Under Radar

APT Trends Report

MoleRATs APT group targets Palestinian territories

Log in or Sign up

APT-C-23 has Re-Emerged on the Front Scene

mood Updates Team

New attack tied to Higaisa APT discovered

ACSC Releases Cyber Criminal and APT Tradecraft Trends for 2019-2020

Naikon APT Hid Five-Year Espionage Attack Under Radar

APT Trends Report

MoleRATs APT group targets Palestinian territories

Useful Searches