tRat Emerges as New Pet for APT Group TA505

guest · Nov 15, 2018

tRat Emerges as New Pet for APT Group TA505
November 15, 2018
https://threatpost.com/trat-emerges-as-new-pet-for-apt-group-ta505/139136/

A new modular malware written in Delphi dubbed tRat has scurried into the spotlight, after making its debut in large spam campaigns this fall.
The remote-access trojan has yet to show all of its cards to researchers, and seems to be in a testing phase, but the fact that well-known APT group TA505 is the one using it makes it bear watching, according to researchers.

“On October 11, we observed another email campaign distributing tRAT, this time by TA505,” they said in a posting on Thursday. “This campaign was more sophisticated, using both Microsoft Word and Microsoft Publisher files, and varying subject lines and senders. [...]"

Most interestingly however, Proofpoint said that the only supported command in the loader for now is the straightforwardly named “MODULE,” which can be used to send the malware additional pieces of code. To receive a module, tRat has a sequence of actions that it must follow.
Click to expand...

Minimalist · Dec 7, 2018

TA505 Crooks are Now Targeting US Retailers with Personalized Campaigns

Cybercriminals behind the notorious Dridex and Locky ransomware have a new target in their sights – large retail, restaurant and grocery chains located in the US.

Researchers are warning the well-known financial criminal group TA505 is behind a new wave of email campaigns distributing personalized malware-laced attachments, a technique not previously associated with the threat actor.
Click to expand...

https://threatpost.com/ta505-crooks-are-now-targeting-us-retailers-with-personalized-campaigns/

Log in or Sign up

tRat Emerges as New Pet for APT Group TA505

guest Guest

Minimalist Registered Member

Log in or Sign up

tRat Emerges as New Pet for APT Group TA505

guest Guest

Minimalist Registered Member

Useful Searches