Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le septembre 29, 2021, 18:00:17

Titre: [SecList]DarkHalo after SolarWinds: the Tomiris connection
Posté par: igor51 le septembre 29, 2021, 18:00:17
DarkHalo after SolarWinds: the Tomiris connection

We discovered a campaign delivering the Tomiris backdoor that shows a number of similarities with the Sunshuttle malware distributed by DarkHalo APT and target overlaps with Kazuar.
Source: DarkHalo after SolarWinds: the Tomiris connection (https://securelist.com/darkhalo-after-solarwinds-the-tomiris-connection/104311/)