New BugSleep malware implant deployed in MuddyWater attacks

Caute_cautim — Wed, 17 Jul 2024 21:16:14 GMT

Hi All

The Iranian-backed MuddyWater hacking group has partially switched to using a new custom-tailored malware implant to steal files and run commands on compromised systems.

Dubbed BugSleep, this new backdoor is still actively being developed and was discovered by analysts at Check Point Research while being distributed via well-crafted phishing lures.

The campaign pushes the malware via phishing emails disguised as invitations to webinars or online courses. The emails redirect the targets to archives containing malicious payloads hosted on the Egnyte secure file-sharing platform.

https://www.bleepingcomputer.com/news/security/new-bugsleep-malware-implant-deployed-in-muddywater-attacks/

Regards

Caute_Cautim

Re: New BugSleep malware implant deployed in MuddyWater attacks

Kyaw_Myo_Oo — Fri, 19 Jul 2024 08:35:44 GMT

Thanks for sharing @Caute_cautim.

topic New BugSleep malware implant deployed in MuddyWater attacks in Threats

New BugSleep malware implant deployed in MuddyWater attacks

Re: New BugSleep malware implant deployed in MuddyWater attacks