APT Group Using Backdoor for Espionage
GovInfoSecurity Compliance Compliance Compliance @prajeetspeaks) • May 12, 2021 Architecture of the Moriya rootkit (Source: Kaspersky) An ongoing advanced persistent threat campaign dubbed "Operation TunnelSnake" has been using a Windows rootkit named Moriya to deploy a passive backdoor to spy on victims, the security firm Kaspersky reports. Researchers observed the campaign being conducted on public-facing servers within the victim organizations to spy on network traffic and send commands to compromised hosts....
Source: govinfosecurity.com