Financial Services Employees Targeted with RAT through Google Cloud storage

guest · Dec 19, 2018

Financial Services Employees Targeted with RAT
December 19, 2018
https://www.infosecurity-magazine.com/news/financial-services-employees/

An active email campaign is reportedly targeting banking and financial services employees in the US and UK using popular cloud services to host the malicious payload, according to a blog posted today by Menlo Security.
Evidence suggests that the campaign has been active since August, and researchers have confirmed that the malware one RAT family used was Houdini.

According to the blog, attackers used storage.googleapis.com, the domain of the Google Cloud Storage service, to host the malicious payload, and the primary attack vector is email, where malicious URLs are embedded within emails rather than sent as attachments.

“You can no longer trust ANY website: attackers are increasingly hiding behind well-know, popular hosting services to avoid detection. Credential attacks and remote access Trojans (RAT) malware are trends that will continue in the finance sector. These payloads, often zipped-up and in some cases in two layers, will continue to evolve to maneuver payloads into the environment,” Pidathala said.
Click to expand...

Log in or Sign up

Financial Services Employees Targeted with RAT through Google Cloud storage

guest Guest

Log in or Sign up

Financial Services Employees Targeted with RAT through Google Cloud storage

guest Guest

Useful Searches