A new malware known as Speagle has been discovered by cybersecurity researchers. It takes over the infrastructure and operation of Cobra DocGuard, a genuine application.
According to a report released today by Symantec and Carbon Black researchers, Speagle is intended to covertly gather private data from compromised computers and send it to a Cobra DocGuard server that has been compromised by the attackers, disguising the data exfiltration process as authentic client-server communications.
EsafeNet created Cobra DocGuard, a platform for document protection and encryption. To date, there have been two published reports of this software being abused in actual assaults. ESET reported in January 2023 that a malicious software update had compromised a Hong Kong gaming company in September 2022.
Later in August, Symantec reported on the activity of a new threat cluster known as Carderbee, which was discovered to be deploying PlugX using a trojanized version of the application read more about Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.