Israeli Entities Targeted by Cyberattack Using Donut and Sliver Frameworks
Researchers studying cybersecurity have uncovered an assault operation that targets several Israeli organizations using frameworks like Donut and Sliver that are available to the public.
"Leverage target-specific infrastructure and custom WordPress websites as a payload delivery mechanism, but affect a variety of entities across unrelated verticals, and rely on well-known open-source malware," according to a report released by HarfangLab last week, indicating that the campaign is thought to be highly targeted.
The activity is being monitored by the French business using the moniker "Supposed Grasshopper." It is a pointer to a server under the control of the attacker ("auth.economy-gov-il[.]com/SUPPOSED_GRASSHOPPER.bin"), which is connected to by a first-stage downloader.
This is ...