minute read
Authors
We mentioned a payload for Bagle.at, where the worm tried to connect to compromised sites. The links were inactive up to now. Today some of the links are active.
Bagle.at tries to download and execute TrojanDownloader.Win32.Small.zj, a new variant of Small.
Authors
From the same authors
In the same category
Lazarus targets employees of a nuclear-related organization with a bunch of malware, such as MISTPEN, LPEClient, RollMid, CookieTime and a new modular backdoor CookiePlus.
Kaspersky researchers analyze 2019, 2022 and 2024 attacks attributed to Careto APT with medium to high confidence.
The report features the most significant developments relating to APT groups in Q3 2024, including hacktivist activity, new APT tools and campaigns.
Kaspersky analyzes SideWinder APT’s recent activity: new targets in the MiddleEast and Africa, post-exploitation tools and techniques.
The hottest research right in your inbox
Bagle.at links to compromised sites now active