Cyber-espionage campaign opens backdoor to steal documents from infected PCs

Researchers at security company ESET uncover Crutch, a new malware backdoor. The newly detailed Crutch campaign appears tailored towards particular targets, suggesting a ministry of foreign affairs in an EU country. 

This malware is built to steal sensitive documents and other files by secretly copying them from Dropbox accounts controlled by the attackers. This malware campaign has been active from 2015 through to 2020 and researchers have linked it to the Turla hacking group due to similarities with previously uncovered campaigns. The backdoor has repeatedly been updated and changed over the years in order to maintain effectiveness while also keeping it hidden. The attackers were able to move laterally and compromise additional machines by reusing admin passwords.

Check the source.

Read More

• Cyber-espionage campaign opens backdoor to steal documents from infected PCs
  Researchers at security company ESET uncover Crutch, a new malware backdoor. The newly detailed Crutch campaign appears tailored towards particular […]
• Crooks posing as COVID-19 ‘cold chain’ company phished EU for vaccine intel, says IBM
  An unidentified group of malicious sorts impersonated a so-called “cold chain” company involved in COVID-19 vaccine distribution networks then […]
• Major Business Email Compromise Phishing Ring Busted
  Authorities found over 50,000 targeted victims of a massive, global scam enterprise that used over 26 different types of […]
• TurkeyBombing Puts New Twist on Zoom Abuse
  Hackers stole nearly 4,000 credentials before Thanksgiving was even over. While millions of people were forced to spend the […]
• This Bluetooth Attack Can Steal a Tesla Model X in Minutes
  The company is rolling out a patch for the vulnerabilities, which allowed one researcher to break into a car […]