Leviathan group targets maritime industry with custom malware

itman · Oct 17, 2017

The cyberespionage group Leviathan is targeting high-value targets in the maritime industries, naval defense contractors, and associated research institutions in the United States, Western Europe, and the South China Sea.

Proofpoint researchers said the threat group has been active since at least 2014 and uses a custom JavaScript malware known as “Orz” and “NanHaiShu”, Cobalt Strike, the SeDll JavaScript loader, and MockDll dll loader, according to an Oct. 16 blog post.

The malware looks to exploit Microsoft Excel and Word documents with using recent vulnerabilities including CVE-2017-0199 and CVE-2017-8759, and malicious Microsoft Publisher files, researchers said adding threat actors sometimes utilizes access at one compromised organization to attack the next.
Click to expand...

https://www.scmagazine.com/cyberesp...defense-and-educational-firms/article/700687/

Log in or Sign up

Leviathan group targets maritime industry with custom malware

itman Registered Member

Log in or Sign up

Leviathan group targets maritime industry with custom malware

itman Registered Member

Useful Searches