Backdoor Uses FTP Server as C&C

itman · Oct 5, 2017

A newly detailed backdoor is using an FTP server for command and control (C&C) purposes, Trend Micro security researchers warn.

Dubbed SYSCON, the malware is being distributed through malicious documents containing macros. All of these documents mention North Korea and appear to be targeted at individuals connected to the Red Cross and the World Health Organization.

The use of an FTP server for C&C is rather unusual for a botnet, thus possibly slipping unnoticed by administrators and researchers. While this is a clear advantage, the fact that it leaves traffic open for monitoring is a great downside.
Click to expand...

http://www.securityweek.com/backdoor-uses-ftp-server-cc

RockLobster · Oct 5, 2017

You know, our IT industry ought to start hiring from Russia, N.Korea and Iran because they are obviously way smarter than the entire rest of the world since, according to the propag... ahem, I mean, the news, practically every hacker is from there.

Log in or Sign up

Backdoor Uses FTP Server as C&C

itman Registered Member

RockLobster Registered Member

Log in or Sign up

Backdoor Uses FTP Server as C&C

itman Registered Member

RockLobster Registered Member

Useful Searches