Welcome to our

Cyber Security News Aggregator

.

Cyber Tzar

provide a

cyber security risk management

platform; including automated penetration tests and risk assesments culminating in a "cyber risk score" out of 1,000, just like a credit score.

New NetSupport Campaign Delivered Through MSIX Packages, (Mon, Jun 17th)

published on 2024-06-17 07:22:40 UTC by
Content:
It's amazing to see how attackers reuse and combine known techniques to target their victims with new campaigns! Last week, I spotted some malicious MSIX packages on VT that drop a NetSupport[1] client preconfigured to phone home to an attacker's controlled manager. Remote support tools are really "cool" for attackers because they provide a perfect way to communicate with infected computers without the need to develop their own C2 infrastructure and protocol! If some are popular and often searched as evidence of compromise, like AnyDesk or TeamViewer), there are others, like NetSupport, that tend to remain below the radar. This one is available for free for 30 days (more than enough to launch a campaign) and provides all the expected features to interact with victims:
Article: New NetSupport Campaign Delivered Through MSIX Packages, (Mon, Jun 17th) - published 5 months ago.

https://isc.sans.edu/diary/rss/31018   
Published: 2024 06 17 07:22:40
Received: 2024 06 17 08:14:52
Feed: SANS Internet Storm Center, InfoCON: green
Source: SANS Internet Storm Center, InfoCON: green
Category: Alerts
Topic: Vulnerabilities
Views: 3

Custom HTML Block

Click to Open Code Editor