NOBELIUM/SUNSHUTTLE

[overlap]

مقالتين تقنيتين من طرف FireEye و  Microsoft تتحدثان عن هجمات مماثلة و علاقتها بهجوم SolarWinds.


New SUNSHUTTLE Second-Stage Backdoor Uncovered Targeting U.S.-Based Entity; Possible Connection to UNC2452 

https://www.fireeye.com/blog/threat-research/2021/03/sunshuttle-second-stage-backdoor-targeting-us-based-entity.html

PHP

تحديد الكل

GoldMax, GoldFinder, and Sibot: Analyzing NOBELIUM’s layered persistence

https://www.microsoft.com/security/blog/2021/03/04/goldmax-goldfinder-sibot-analyzing-nobelium-malware/

PHP

تحديد الكل