US cyber security experts: BeagleBoyz gang is targeting organizations with Op. “FASTCash 2.0”, in an ongoing cyber-enabled bank robbery scheme, attempting to steal $2 Billions.
Trend Micro cyber security experts: The first malicious code abuses user account control (UAC) bypass and works as a loader for other threats. The second is a dangerous backdoor.
The malware chain of infection starts with a weaponized email in Korean. The cyber security experts: It’s seems the work of TA505 APT, focused on financial institutions-retail companies.
Yoroi-Cybaze cyber security experts noticed a suspicious attack on an organization with spear phishing email and a RMS used as a RAT. The target is not linked to Banking-Retail sectors.
Yoroi-Cybaze cyber security experts: They are “The Broken Doc”, “Hide Payload with Office Developer Mode”, and “Spoofed Signature”or “Certificate Spoofing”.
It has been discovered by Proofpoint cyber security experts. The cybercrime group behind it is TA505, responsible for Dridex campaigns in 2015 and Locky ransomware in 2016.