Rewterz Threat Alert – Enhanced Spyware Variant used by APT C-23 to target the Middle East
November 26, 2021Rewterz Threat Alert – SNAKE Ransomware – Active IOCs
November 28, 2021Rewterz Threat Alert – Enhanced Spyware Variant used by APT C-23 to target the Middle East
November 26, 2021Rewterz Threat Alert – SNAKE Ransomware – Active IOCs
November 28, 2021Severity
High
Analysis Summary
Cyber espionage actors, aka APT32 (OceanLotus Group), are carrying out intrusions into private sector companies across multiple industries and have also targeted foreign governments, dissidents, and journalists. APT32 leverages a unique suite of fully-featured malware, in conjunction with commercially available tools, to conduct targeted operations that are aligned with Vietnamese state interests.
Impact
- Information Theft and Espionage
Indicators of Compromise
MD5
- ed77d96226a262a4cac4807e4355257a
SHA-256
- ed327409ab945756d99f852647a48e0e3982b75cfa94b823bbd19fb073a9d970
SHA-1
- d3b1a0d696286ef048aa0579814c8cd89e6eb8e0
Remediation
- Block all threat indicators at your respective controls.
- Search for IOCs in your environment.