(untitled)

State Actors Thread

>>8095 >https://threatpost.com/nation-state-actors-go-all-in-on-mobile-malware/146771 >Mobile malware is also becoming more attractive of a tool thanks to ever-increasing scrutiny of desktop machines by security products >State actors with SIGINT [signals intelligence] collection missions are also likely to invest in the creation of mobile malware as a solution to the increased adoption of encrypted network communications across email, web and messaging services, as access to a mobile endpoint will provide opportunities to subvert this trend.” End point Security is important

>>8095 >archive.is/OWJYW States are Primarily targeting states, or NGO's for political purposes including compromising critical infrastructure for cyberwar. Except North Korea who seeks cash. >Across all regions, geo-politics remains the principal driver of APT activity. >A group connected to the Iranian Revolutionary Guard has been blamed for a wave of cyber-attacks against UK national infrastructure >US Cybersecurity and Infrastructure Security Agency (CISA) has reported an increase in cyberattacks by Iranian actors or proxies, targeting US industries and government agencies using destructive wiper tools. Leaks abound, and the risk of cyber weapon proliferation is high >multiple leaks of alleged Iranian activity that were published within just a few weeks of each other States are targeting each others cyber groups to leverage their infrastructure and compromised targets >apparent hijacking of infrastructure belonging to OilRig. They have uncovered evidence that the Waterbug APT group (aka Turla, Snake, Uroburos, Venomous Bear and KRYPTON) has conducted a hostile takeover of an attack platform belonging to OilRig APT Toolsets continue to evolve. A paticular advanced toolset was discovered with only one known victim >This is a highly sophisticated spyware framework that includes backdoors, loaders, orchestrators, C2 communicators, audio recorders, keyloggers, screen and webcam grabbers, documents, and cryptography key stealers; and even its own file indexer for the victim’s computer. We discovered up to 80 malicious modules stored in its encrypted Virtual File System – one of the highest numbers of plugins we have ever seen in an APT toolset. Stenography is also bieng used >the PLATINUM APT group, uses an elaborate, previously unseen, steganographic technique to conceal communication.

These sound like fuarrrking MGS codenames lmao