Speagle Malware Hijacks Cobra DocGuard to Steal Data via Compromised Servers
A new malware known as Speagle has been discovered by cybersecurity researchers. It takes over the infrastructure and operation of Cobra DocGuard, a genuine application.
According to a report released today by Symantec and Carbon Black researchers, Speagle is intended to covertly gather private data from compromised computers and send it to a Cobra DocGuard server that has been compromised by the attackers, disguising the data exfiltration process as authentic client-server communications.
EsafeNet created Cobra DocGuard, a platform for document protection and encryption. To date, there have been two published reports of this software being abused in actual assaults. ESET reported in January 2023 that a malicious software update had compromised a Hong Kong gaming company in Septembe...