Operation Ghostshell News Today : Breaking News, Live Updates & Top Stories | Vimarsana

In July 2021, Nocturnus - the Cybereason Threat Research and Intelligence team - was called to investigate an espionage campaign targeting Aerospace and Telecommunications companies globally. Their investigation resulted in the discovery of a new threat actor dubbed MalKamak that has been operating since at least 2018, and a new and sophisticated RAT (remote access trojan) dubbed ShellClient that abuses Dropbox for C2 (command and control).

A state-sponsored cyber-espionage campaign has been targeting companies globally including those in the U.S., a new report says.

The MalKamak group has been running its Operation GhostShell campaign for at least three years unnoticed.

Researchers have discovered a previously unknown advanced threat actor, likely of Iranian origin, using a previously undocumented RAT targeting largely aerospace and telecommunications organizations.

The MalKamak group has been running its Operation GhostShell campaign for at least three years unnoticed.