Tag: MeowMeow Backdoor

Cybersecurity experts have revealed information on a recent Russian cyberattack that used the previously unidentified malware families BadPaw and MeowMeow to target Ukrainian organizations. A phishing email with a link to a ZIP archive starts the attack chain. According to a research released this week by ClearSky, once extracted, an initial HTA file shows a lure document written in Ukrainian on border crossing requests to trick the victim. The attack chain also results in the deployment of BadPaw, a.NET-based loader that communicates with a distant server to retrieve and launch MeowMeow, a sophisticated backdoor. Based on the targeting footprint, the geopolitical nature of the lures utilized, and similarities to methods seen in earlier Russian cyber operations, the campaign has ...