Source |
The Hacker News |
Identifiant |
8620499 |
Date de publication |
2024-12-06 12:33:00 (vue: 2024-12-06 08:07:52) |
Titre |
Hackers Leveraging Cloudflare Tunnels, DNS Fast-Flux to Hide GammaDrop Malware |
Texte |
The threat actor known as Gamaredon has been observed leveraging Cloudflare Tunnels as a tactic to conceal its staging infrastructure hosting a malware called GammaDrop.
The activity is part of an ongoing spear-phishing campaign targeting Ukrainian entities since at least early 2024 that\'s designed to drop the Visual Basic Script malware, Recorded Future\'s Insikt Group said in a new analysis.
The threat actor known as Gamaredon has been observed leveraging Cloudflare Tunnels as a tactic to conceal its staging infrastructure hosting a malware called GammaDrop.
The activity is part of an ongoing spear-phishing campaign targeting Ukrainian entities since at least early 2024 that\'s designed to drop the Visual Basic Script malware, Recorded Future\'s Insikt Group said in a new analysis. |
Notes |
★★
|
Envoyé |
Oui |
Condensat |
2024 activity actor analysis basic been called campaign cloudflare conceal designed dns drop early entities fast flux future gamaredon gammadrop group hackers has hide hosting infrastructure insikt its known least leveraging malware new observed ongoing part phishing recorded said script since spear staging tactic targeting that threat tunnels ukrainian visual |
Tags |
Malware
Threat
|
Stories |
|
Move |
|