New Backdoor Created Using Leaked CIA’s Hive Malware Discovered in the Wild
Unknown threat actors have launched a new backdoor that copies features from the multi-platform Hive malware suite developed by the U.S. Central Intelligence Agency (CIA), whose source code was made public by WikiLeaks in November 2017.
Alex Turing and Hui Wang of Qihoo Netlab 360 wrote in a technical write-up released last week: "This is the first time we captured a variant of the CIA Hive attack kit in the field, and we dubbed it xdr33 based on its embedded Bot-side certificate CN=xdr33."
According to reports, xdr33 spreads by taking advantage of a security flaw in the F5 appliance and connecting to a command-and-control (C2) server over SSL while utilizing counterfeit Kaspersky certificates read the complete article New Backdoor Created Using Leaked CIA's Hive Malware Discovered ...