In the second quarter of 2023, a new malicious actor named Mysterious Elephant emerged in the Asia-Pacific hacking arena. Cybersecurity firm Kaspersky published a report detailing the group’s activities, noting that it uses unique backdoor families and distinct tactics, techniques, and procedures (TTPs). While Mysterious Elephant stands out from other hacking groups, it also shares some similarities with actors like Confucius and SideWinder, who have used earlier versions of the Rover backdoor.
See also: Kaspersky wants to stop its VPN service in Russia
The same report reveals further details about the ongoing “Operation Triangulation” campaign, which involved a previously unknown iOS malware platform distributed via zero-click iMessage exploits. Additionally, the notorious Lazarus hacking group upgraded the MATA framework and introduced a new variant called MATAv5 in Q2 2023. MATAv5 is part of the advanced MATA malware family used by the Lazarus group.
In the second quarter of 2023, a subgroup of the notorious Lazarus hacking group known as BlueNoroff shifted its focus to financial attacks. They adopted new delivery methods and programming languages, such as macOS malware and programming in Rust.
On a broader level, cybersecurity firm Kaspersky noted that APT (Advanced Persistent Threat) activity continues to be influenced by geopolitical factors. Campaigns are widespread in regions such as Europe, Latin America, the Middle East and parts of Asia.
Proposal: FCC: Kaspersky poses a risk to US national security
David Emm, lead security researcher at Kaspersky’s Global Research and Analysis Team (GReAT), stressed the importance of remaining vigilant and prepared for evolving threats. He noted that while some hackers continue to use familiar tactics such as social engineering, others have evolved by updating their toolkits and expanding the scope of their activities. In addition, new advanced hackers, such as those involved in the “Operation Triangulation” campaign, are constantly emerging, making it vital for organizations and individuals to remain prepared for emerging cybersecurity challenges.
Kaspersky researchers provided a series of recommendations for defending against targeted attacks. These measures include keeping operating systems and software up-to-date and strengthening cybersecurity teams with specialized training. They also advised using the latest threat intelligence and implementing endpoint detection and response (EDR) solutions to effectively respond to high-profile attacks and reduce the impact of potential security incidents. By following these guidelines, organizations can better protect themselves from evolving and sophisticated threats.
Read also: Germany to companies: Do not use Kaspersky antivirus
information source: infosecurity-magazine.com
