Gorgon APT Targets Corporate Emails with Spear Phishing Campaign

guest · Sep 26, 2019

Gorgon APT Targets Corporate Emails with Spear Phishing Campaign
September 24, 2019
https://heimdalsecurity.com/blog/security-alert-gorgon-apt-spear-phishing/

The Gorgon APT (Advanced Persistent Threat) is an older but dangerous online threat, first discovered by Unit 42 researchers in February 2018.

The group behind the Gorgon APT was revealed back when the researchers were still investigating Subaat, an attacker, when they realized that they were probably part of a larger group targeting governmental organizations.
The Current Spear Phishing Campaign by Gorgon APT
Once the target clicks it, the malicious file will deliver the payload. The XLS file contains macro / VBA code which gets enabled once the document is opened.
Just like in its previous attacks, the Gorgon APT then connects to Pastebin and downloads and runs an obfuscated Javascript / VBA code from there. [...]

The malicious XLS document is detected by 8 out of 57 Antivirus products listed by VirusTotal. This means that you can’t rely solely on your Antivirus to stay safe.
Click to expand...

Log in or Sign up

Gorgon APT Targets Corporate Emails with Spear Phishing Campaign

guest Guest

Log in or Sign up

Gorgon APT Targets Corporate Emails with Spear Phishing Campaign

guest Guest

Useful Searches