A new backdoor known as UDPGangster, which employs the User Datagram Protocol (UDP) for command-and-control (C2) purposes, has been seen being used by the Iranian hacking outfit MuddyWater.
According to a research from Fortinet FortiGuard Labs, users in Turkey, Israel, and Azerbaijan were the targets of the cyber espionage activities.
According to security researcher Cara Lin, this malware provides remote control of compromised systems by enabling attackers to carry out commands, exfiltrate files, and deploy new payloads—all of which are conveyed using UDP channels intended to circumvent conventional network defenses.
Spear-phishing techniques are used in the attack chain to disseminate Microsoft Word documents that are booby-trapped and, once macros are enabled, cause a malicious payload to be executed. Some of the phishing messages claim read more about MuddyWater Deploys UDPGangster Backdoor in Targeted Turkey-Israel-Azerbaijan Campaign.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.