Analysis of novel RAT discovered dubbed “SuperBear”. The RAT has been found targeting journalist and deployed using open-source AutoIT scripts. Author : Ovi LiberPOST UPDATED: 9/18/2023Executive SummaryOn 8/28/2023, Interlab received a sample sent to a journalist with highly targeted content luring the recipient to open...
Interlab have been monitoring closely events conducted by an advanced persistent threat group we track with Unidentified Cluster ID (UCID) – UCID902. Based on our analysis, we conclude the attempts made by this actor demonstrate continued targeting of human rights groups and activists related to...
저희 인터랩은, 디지털공간에서 반복적으로 인권 활동가들을 타겟으로 하는 사이버공격들의 출처를 추적해오며, 내부적으로 이 공격자를 UCID902로 명명하였습니다. 이 공격자는 장기간동안 국내의 특정 인권활동가들을 대상으로, 활동가들의 온라인 계정정보들을 탈취하기 위한 워터링홀 공격들을 지속적이며 반복적으로 진행해왔습니다. 활동가분들께 지원을 드리는 도중 2021년 처음 발견하게된 이 공격자의 공격 시도는, 네이버 보안...
Detailed analysis report of cyber threat targeting journalist in South Korea through APT phishing campaign with malicious APK Author : Ovi Liber, Threat Researcher @ InterlabPublishing Date : 2022/12/30 Executive Summary A Journalist in South Korea recently received malicious APK file suggested to be installed on the journalist's...