Emissary Panda APT group hit Government Organizations in the Middle East

guest · May 30, 2019

Emissary Panda APT group hit Government Organizations in the Middle East
May 30, 2019
https://securityaffairs.co/wordpress/86316/apt/emissary-panda-middle-east-gov.html

Experts at Palo Alto Networks reported that the Chinese APT group Emissary Panda (aka APT27, TG-3390, Bronze Union, and Lucky Mouse) has been targeting government organizations in two different countries in the Middle East.
The group was involved in cyber espionage campaigns aimed at new generation weapons and in surveillance activities on dissidents and other civilian groups.

In April 2019, the group targeted organizations of two different countries in the Middle East. Hackers hit webservers to install of webshells on SharePoint servers, threat actors leveraged the CVE-2019-0604 vulnerability to compromise SharePoint servers.
Experts pointed out that attackers used tools to scan the network for systems vulnerable to CVE-2017-0144, the flaw exploited by the NSA-linked EternalBlue exploit.

“The Emissary Panda threat group loaded the China Chopper webshell onto SharePoint servers at two Government organizations in the Middle East, which we believe with high confidence involved exploiting a remote code execution vulnerability in SharePoint tracked in CVE-2019-0604,” Palo Alto Networks concludes.
Click to expand...

Unit42: Emissary Panda Attacks Middle East Government Sharepoint Servers

Log in or Sign up

Emissary Panda APT group hit Government Organizations in the Middle East

guest Guest

Log in or Sign up

Emissary Panda APT group hit Government Organizations in the Middle East

guest Guest

Useful Searches