A politically motivated hacker group tied to a series of espionage and sabotage attacks on Israeli entities in 2021 incorporated a previously undocumented remote access trojan (RAT) that masquerades as the Windows Calculator app as part of a conscious effort to stay under the radar.
Cybersecurity company Cybereason, which has been tracking the operations of the Iranian actor known as Moses Staff, dubbed the malware "StrifeWater."
"The StrifeWater RAT appears to be used in the initial stage of the attack and this stealthy RAT has the ability to remove itself from the system to cover the Iranian group's tracks," Tom Fakterman, Cybereason security analyst, said in a report. "The RAT possesses other capabilities, such as command execution and screen capturing, as well as the ability to download additional extensions."
Moses Staff came to light towards the end of last year when Check Point Research unmasked a series of attacks aimed at Israeli organizations since September 2021 with the objective of disrupting the targets' business operations by encrypting their networks, with no option to regain access or negotiate a ransom.
The intrusions were notable for the fact that they relied on the open-source library DiskCryptor to perform volume encryption, in addition to infecting the systems with a bootloader that prevents them from starting without the correct encryption key.
To date, victims have been reported beyond Israel, including Italy, India, Germany, Chile, Turkey, the U.A.E., and the U.S.
The new piece of the attack puzzle discovered by Cybereason comes in the form of a RAT that's deployed under the name "calc.exe" (the Windows Calculator binary) and is used during the early stages of the infection chain, only to be removed prior to the deployment of the file-encrypting malware.
The removal and the subsequent replacement of the malicious calculator executable with the legitimate binary, the researchers suspect, is an attempt on the part of the threat actor to cover up tracks and erase evidence of the trojan, not to mention enable them to evade detection until the final phase of the attack when the ransomware payload is executed.
StrifeWater, for its part, is no different from its counterparts and comes with numerous features, chief among them being the ability to list system files, execute system commands, take screen captures, create persistence, and download updates and auxiliary modules.
"The end goal for Moses Staff appears to be more politically motivated rather than financial," Fakterman concluded. "Moses Staff employs ransomware post-exfiltration not for financial gain, but to disrupt operations, obfuscate espionage activity, and to inflict damage to systems to advance Iran's geopolitical goals."
Related articles
- Pentest Tools Find Subdomains
- What Are Hacking Tools
- Hacker Tools For Ios
- Hacker Tools Mac
- Pentest Tools Port Scanner
- Hacking Tools For Beginners
- Pentest Tools Subdomain
- Hacking Tools Free Download
- Free Pentest Tools For Windows
- Pentest Tools Framework
- Hacker
- Pentest Automation Tools
- Install Pentest Tools Ubuntu
- Hack Tools
- Termux Hacking Tools 2019
- Hacking Tools For Windows
- Hack Tools
- Hacking Tools Kit
- Hack Tools For Ubuntu
- Pentest Tools Find Subdomains
- Hack Tools 2019
- Hacking Tools Software
- Pentest Tools Download
- How To Make Hacking Tools
- How To Make Hacking Tools
- Hacker Tools Apk Download
- Hacking Tools For Windows
- Android Hack Tools Github
- Wifi Hacker Tools For Windows
- Hacking Tools Windows 10
- Hack Tools For Games
- Hack Rom Tools
- Hack Tools Github
- Hack Tool Apk No Root
- Hacking Tools Github
- Hacker Tools Linux
- Hack Tools Online
- Hacking Tools For Mac
- Hacking Tools Usb
- Pentest Tools Open Source
- Pentest Tools Android
- Pentest Tools Linux
- Hack Tools
- Free Pentest Tools For Windows
- Hack Tools For Ubuntu
- Hack Tools For Games
- Pentest Tools Find Subdomains
- Hacker Tools 2020
- Hacker Tools Apk Download
- Hack Tools 2019
- Hacking Tools Kit
- Hacker Search Tools
- What Are Hacking Tools
- Hacker Tools For Windows
- Hacking Tools Free Download
- Bluetooth Hacking Tools Kali
- Pentest Tools Open Source
- How To Make Hacking Tools
- Hack Tools For Games
- Hack Tools Download
- Beginner Hacker Tools
- Hacker Tools For Ios
- Hacker Tools Apk
- Hacker Techniques Tools And Incident Handling
- Underground Hacker Sites
- Pentest Tools Alternative
- Pentest Tools Kali Linux
- Pentest Tools For Windows
- Hack Tools
- Hacking Tools For Pc
- Pentest Tools Free
- Pentest Tools Free
- Hack Tool Apk
- Hack Website Online Tool
- Hacking Tools Github
- Pentest Tools Find Subdomains
- Hack Apps
- Pentest Tools Tcp Port Scanner
- Hacking Tools For Pc
- Wifi Hacker Tools For Windows
- Pentest Tools Nmap
- Underground Hacker Sites
- Hacker Security Tools
- Install Pentest Tools Ubuntu
- Underground Hacker Sites
- Hacking App
- Kik Hack Tools
- Hacker Tools Free
- Hack Tools
- Hacking Tools For Windows 7
- Hacker Tools For Windows
- Growth Hacker Tools
- Hack Tools
- Android Hack Tools Github
- Pentest Tools Windows
- Hacker Tools Free Download
- Hacker Tools Free
- Computer Hacker
- Hacking Tools For Beginners
- Pentest Tools Bluekeep
- Hack Website Online Tool
- Pentest Tools For Android
- Pentest Automation Tools
- Hack Tools 2019
- Beginner Hacker Tools
- Hacker Tools Github
- Hacking Tools Free Download
- Hacker Tools 2020
- Hacking App
- Hacking Tools Name
- Pentest Tools Download
- Pentest Tools Github
- Hacker Tools Windows
- Hacker Tools 2020
- New Hack Tools
- Hacking Tools For Windows Free Download
- Pentest Automation Tools
- Hack Rom Tools
- Hacker Tools For Pc
- Hacker Tools 2019
- Hacking Tools For Beginners
- Hack Tools
- Hack Tools For Games
- Top Pentest Tools
- Pentest Tools Framework
- Hacking Tools Windows
- Hack Tool Apk No Root
- Top Pentest Tools
- Hacker Tools Windows
- Hacker Tools Apk
- Hacker Tools Linux
- Best Hacking Tools 2019
- Pentest Tools For Windows
- Best Pentesting Tools 2018
- Pentest Tools Kali Linux
- What Is Hacking Tools
- Hacker Tool Kit
- Hacker Tools Hardware
- Physical Pentest Tools
- Pentest Tools Nmap
- Hack Tools
- Hacker Tools Free Download
- Best Hacking Tools 2020
- Install Pentest Tools Ubuntu
- Hacking Tools For Windows 7
- Hacker Tools For Windows
- Hacking Tools 2020
- Wifi Hacker Tools For Windows
- Pentest Tools List
- Hack Tools For Ubuntu
- Hack And Tools
- Hacker Tools For Pc
- Computer Hacker
- Hacking Tools Download
- Pentest Tools Subdomain
- Hacking Tools 2019
- New Hack Tools
- Pentest Tools Online
- Easy Hack Tools
- Pentest Tools For Windows
- Tools Used For Hacking
- Tools Used For Hacking
- Hack Tools For Pc
- Best Pentesting Tools 2018
- Pentest Tools Subdomain
- Beginner Hacker Tools
- Pentest Tools Nmap
- Pentest Tools Online
- World No 1 Hacker Software
- Hacker Security Tools
- Hacking Tools Github
- Free Pentest Tools For Windows
- Nsa Hacker Tools
- What Are Hacking Tools
- Hack Apps
No comments:
Post a Comment