Tag: Vietnamese Hackers

Vietnamese Hackers Target U.K., U.S., and India with DarkGate Malware
News

Vietnamese Hackers Target U.K., U.S., and India with DarkGate Malware

Attacks using the commodity malware DarkGate that target organizations in the U.S., India, and the U.K. have been connected to Vietnamese criminals who are known to use the infamous Ducktail stealer. WithSecure stated in a report released today that "the overlap of tools and campaigns is very likely due to the effects of a cybercrime marketplace." "Threat actors are able to acquire and use multiple different tools for the same purpose, and all they have to do is come up with targets, campaigns, and lures." The development coincides with an increase in malware campaigns that use DarkGate in recent months, mostly due to its creator's choice to sell it to other threat actors for malware-as-a-service (MaaS) after utilizing it for personal use since 2018 read more Vietnamese Hackers Targ...
Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger
News

Vietnamese Hackers Deploy Python-Based Stealer via Facebook Messenger

A "swarm of fake and hijacked personal accounts" are being used in a new phishing operation that uses Facebook Messenger to spread messages with malicious attachments with the ultimate goal of gaining control of the targets' accounts. This campaign, which once more has its roots in a Vietnamese-based organization, "uses a tiny compressed file attachment that packs a powerful Python-based stealer dropped in a multi-stage process full of simple yet effective obfuscation methods," according to research by Guardio Labs researcher Oleg Zaytsev. These attacks, known as MrTonyScam, lure potential victims with messages that tempt them to click on the RAR and ZIP archive files, which then triggers the deployment of a dropper that downloads the subsequent stage from a GitHub or GitLab reposit...