Researchers Uncover FIN8's New Backdoor Targeting Financial Institutions

guest · Aug 25, 2021

Researchers Uncover FIN8's New Backdoor Targeting Financial Institutions
August 25, 2021
https://thehackernews.com/2021/08/researchers-uncover-fin8s-new-backdoor.html

A financially motivated threat actor notorious for setting its sights on retail, hospitality, and entertainment industries has been observed deploying a completely new backdoor on infected systems, indicating the operators are continuously retooling their malware arsenal to avoid detection and stay under the radar.

The previously undocumented malware has been dubbed "Sardonic" by Romanian cybersecurity technology company Bitdefender, which it encountered during a forensic investigation in the wake of an unsuccessful attack carried out by FIN8 aimed at an unnamed financial institution located in the U.S.
Click to expand...

Said to be under active development, "Sardonic backdoor is extremely potent and has a wide range of capabilities that help the threat actor leverage new malware on the fly without updating components," Bitdefender researchers Eduard Budaca and Victor Vrabie said in a report shared with The Hacker News.

If anything, the latest development is yet another sign of FIN8's shift in tactics by strengthening its capabilities and malware delivery infrastructure.
Click to expand...

Bitdefender: FIN8 Threat Actor Spotted Once Again with New "Sardonic" Backdoor

Key facts about Sardonic:

Sardonic is a new backdoor in the FIN8 ecosystem

Sardonic is a project still under development and includes several components

The new components were identified in a real-life attack and seems to be compiled just before the attack

Sardonic backdoor is extremely potent and has a wide range of capabilities that help the threat actor leverage new malware on the fly without updating components

Click to expand...

Bitdefender: Deep dive into a FIN8 attack – A forensic investigation

Log in or Sign up

Researchers Uncover FIN8's New Backdoor Targeting Financial Institutions

guest Guest

Log in or Sign up

Researchers Uncover FIN8's New Backdoor Targeting Financial Institutions

guest Guest

Useful Searches