Operation Ghostshell News Today

In July 2021, Nocturnus - the Cybereason Threat Research and Intelligence team - was called to investigate an espionage campaign targeting Aerospace and Telecommunications companies globally. Their investigation resulted in the discovery of a new threat actor dubbed MalKamak that has been operating since at least 2018, and a new and sophisticated RAT (remote access trojan) dubbed ShellClient that abuses Dropbox for C2 (command and control).

A state-sponsored cyber-espionage campaign has been targeting companies globally including those in the U.S., a new report says.

The MalKamak group has been running its Operation GhostShell campaign for at least three years unnoticed.

Researchers have discovered a previously unknown advanced threat actor, likely of Iranian origin, using a previously undocumented RAT targeting largely aerospace and telecommunications organizations.

The MalKamak group has been running its Operation GhostShell campaign for at least three years unnoticed.

Boston, MA (PRWEB) October 06, 2021 -- Cybereason, the leader in operation-centric attack protection, today published a new threat intelligence report that

Since at least 2018, "MalKamak" group has targeted firms in the Middle East, Russia, and other areas to steal sensitive data, security vendor says.

Iranian hackers are using Dropbox storage to remain hidden during a long-running cyberespionage campaign.

Threat researchers investigating malware used to target companies in the aerospace and telecommunications sectors discovered a new threat actor that has been running cyber espionage campaigns since at least 2018.