Lead Security Researcher, GReAT
Christian joined Kaspersky in 2007 and became a Junior Malware Analyst a year later. His specialist field is social networking sites and internet fraud. Since 2010, Christian has been a Virus Analyst for the company and has worked extensively with teams across Central Europe. Christian has a degree in Computer Technologies from the Ingolstadt University of Applied Sciences in Germany.In this article, we discuss the tools and TTPs used in the SideWinder APT’s attacks in H2 2024, as well as shifts in its targets, such as an increase in attacks against the maritime and logistics sectors.
Kaspersky researchers analyze EAGERBEE backdoor modules, revealing a possible connection to the CoughingDown APT actor.
While investigating an incident involving the BellaCiao .NET malware, Kaspersky researchers discovered a C++ version they dubbed “BellaCPP”.
Lazarus targets employees of a nuclear-related organization with a bunch of malware, such as MISTPEN, LPEClient, RollMid, CookieTime and a new modular backdoor CookiePlus.