Platinum Hackers Use Steganography to Mask C&C Communications

guest · Jun 5, 2019

Platinum Hackers Use Steganography to Mask C&C Communications
June 5, 2019
https://www.securityweek.com/platinum-hackers-use-steganography-mask-cc-communications

Attacks recently attributed to the "Platinum" cyber espionage group have employed an elaborate, previously unseen steganographic technique, researchers from Kaspersky say.
The attacks were observed in June 2018 targeting diplomatic, government and military entities in South and Southeast Asian countries, but the campaign may have started as far back as 2012. Featuring a multi-stage approach, the campaign was dubbed EasternRoppels.

In addition to the commands supported in the steganography backdoor, the malware can leverage the Windows index service to search files for keywords provided by the attacker. Moreover, it can ensnare the infected systems into a P2P network, which allows the attackers to access victims that lack Internet access but are on the same network with those that are connected to the Web.

“We have discovered a new attack by this group and noted that the actors are still working on improving their malicious utility and using new techniques for making the APT stealthier. […] based on the custom cryptor used by the actors, we have been able to attribute this attack to the notorious PLATINUM group, which means this group is still active,” Kaspersky concludes.
Click to expand...

Kaspersky: Platinum is back

Log in or Sign up

Platinum Hackers Use Steganography to Mask C&C Communications

guest Guest

Log in or Sign up

Platinum Hackers Use Steganography to Mask C&C Communications

guest Guest

Useful Searches