Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le août 30, 2017, 17:00:24

Titre: [SecList]Introducing WhiteBear
Posté par: igor51 le août 30, 2017, 17:00:24
Introducing WhiteBear

As a part of our Kaspersky APT Intelligence Reporting subscription, customers received an update in mid-February 2017 on some interesting APT activity that we called WhiteBear. It is a parallel project or second stage of the Skipper Turla cluster of activity documented in another private report. Like previous Turla activity, WhiteBear leverages compromised websites and hijacked satellite connections for command and control (C2) infrastructure.
Source: Introducing WhiteBear (https://securelist.com/introducing-whitebear/81638/)