McAfee analysts have uncovered a global threat that they say is assaulting a number of industries, including critical infrastructure, entertainment, finance, healthcare, and telecommunications.
This campaign, dubbed Operation GhostSecret, leverages multiple implants, tools, and malware variants associated with the state-sponsored cyber group Hidden Cobra.
According to McAfee, the campaign is extremely complicated, leveraging implants to steal information from infected systems and designed to evade detection.
“As we monitor this campaign, it is clear that the publicity associated with the (we assume) first phase of this campaign did nothing to slow the attacks. The threat actors not only continued but also increased the scope of the attack, both in types of targets and in the tools they used,” McAfee said. “We try to avoid using the word sophisticated because it is both subjective and overused. Nonetheless, the attackers have significant capabilities, demonstrated by their tools development and the pace at which they operate.”
Read more here
