Chinese hackers use new Atlas RAT malware in European cyberattacks
Using previously undiscovered malware and the Atlas backdoor, a Chinese-speaking cybercrime ring has extended its targeting to the European region.
The threat actor, identified as TA4922, is linked to financially driven attacks that target networks in order to commit fraud, steal data, and sell access.
While TA4922 has traditionally targeted East Asian organizations, more recent attacks have concentrated on organizations in Germany, Italy, the UK, and South Africa.
TA4922 shares have similarities with behavior previously described as "Silver Fox" and "Void Arachne," according to researchers at cybersecurity firm Proofpoint. However, because it is more consistent with cybercrime than espionage, the activity cluster is monitored independently.
The activity of TA4922 has expanded...