A new malware called CARROTBALL, used as a second-stage payload in targeted attacks, was distributed in phishing email attachments delivered to a U.S. government agency and non-US foreign nationals professionally affiliated with current activities in North Korea.
CARROTBALL came in a Microsoft Word document acting as a lure for the target, from a Russian email address. The topic was geopolitical relations issues regarding North Korea, Bleeping Computer reported.
U.S. Govt Agency Hit with New CARROTBALL Malware Dropper – by @Ionut_Ilascuhttps://t.co/xrDRnze6lw
— BleepingComputer (@BleepinComputer) January 24, 2020
Experts Comments
January 27, 2020
Because of the protocols used in this campaign, network security monitoring practitioners have a chance to gather the evidence they need to detect and respond to individual attacks. The intruders used file transfer protocol to transfer files that are executed as commands on victim systems. Because some network traffic analysis and monitoring systems log and parse FTP, and can extract the files transferred, defenders can leverage network forensics to identify the scope and nature of this.....Read More
Like(Submit Your Expert Comments
What do you think of the topic? Do you agree with expert(s) or share your expert opinion below.Be part of our growing Information Security Expert Community (1000+), please register here.
Linkedin Message
@Erich Kron, Security Awareness Advocate, provides expert commentary at @Information Security Buzz.
"Spear phishing has long been a tool of adversaries and cyber criminals, and a very effective one at that. ..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/u-s-govt-agency-hit-with-new-carrotball-malware-dropper
Facebook Message
@Erich Kron, Security Awareness Advocate, provides expert commentary at @Information Security Buzz.
"Spear phishing has long been a tool of adversaries and cyber criminals, and a very effective one at that. ..."
#infosec #cybersecurity #isdots
https://informationsecuritybuzz.com/expert-comments/u-s-govt-agency-hit-with-new-carrotball-malware-dropper