Cisco Talos: LilacSquid Threat Actor Targets Multiple Sectors Worldwide With PurpleInk Malware
Briefly

from TechRepublic2 weeks ago
LilacSquid, dubbed UAT-4820, targets IT, energy, and pharmaceutical sectors globally, using methods akin to North Korean APT groups like Andariel and Lazarus.
TechRepublichttps://www.techrepublic.com/article/cisco-talos-lilacsquid-purpleink-malware/
LilacSquid exploits vulnerable web applications, then deploys MeshAgent via bitsadmin to maintain access, possibly sharing tools with Lazarus. Organizations across the U.S., Europe, and Asia are affected.
TechRepublichttps://www.techrepublic.com/article/cisco-talos-lilacsquid-purpleink-malware/
Read at TechRepublic
#cyberespionage #data-theft #threat-actor #custom-malware #lilacsquid
[
add
]
[
|
|
]