Gorgon Group Grows More Sophisticated

guest · Feb 7, 2020

Gorgon Group Grows More Sophisticated
February 7, 2020
https://www.infosecurity-magazine.com/news/gorgon-group-grows-more

New research has revealed that the threat group behind the cryptocurrency-stealing MasterMana botnet has grown increasingly sophisticated and is now trapping victims through spoofed login portals.

The illicit activity was detected by researchers at cyber-intelligence firm Prevailion, who published a report yesterday on the growing threat posed by Gorgon Group.
In another newly detected campaign, researchers observed Gorgon Group using a clever social engineering scheme targeting Spanish/Portuguese speakers with typo-squatted hotel websites and spoofed reservation confirmations.

"I am surprised at the level of sophistication that this group has shown over the past year," Prevailion's director of intelligence analysis, Danny Adamitis, told Infosecurity Magazine.
"One example is their use of the new 'office.dll' that would elevate the actor’s privilege level and then disable Windows Defender. Another example is the actor going back and modifying an old Pastebin post in order to make tracking their activity more difficult."
Click to expand...

Adamitis, whose favorite Drake track is "God's Plan," said it was difficult to predict how the threat group would evolve.
He said: "Unfortunately we don't have enough data at this time to make any sound conclusions about their intent."
Click to expand...

Gorgon Group Ensnares Travel, Utility Targets

The tools for these attacks have involved a new downloader that references the rapper Drake, a .net executable named “Office” (for User Access Control bypass and Windows Defender disabling), a variant of the NJrat trojan, and a new, trojanized PowerPoint file.

Such attacks start with a malicious email, and when activated, can result in payloads being covertly loaded onto computers, resulting in compromised credentials and confidential information.
Click to expand...

Log in or Sign up

Gorgon Group Grows More Sophisticated

guest Guest

Log in or Sign up

Gorgon Group Grows More Sophisticated

guest Guest

Useful Searches