minute read
Authors
A new Bofra variant has been reported. We already detect it generically as “I-Worm.Bofra.gen”. The new variant has a distribution node located at the following URL:
http://kjh0.narod.ru/
Just like we did with previous Bofra variants, we are talking to narod.ru adminstrators to take the site offline ASAP.
Authors
From the same authors
In the same category
Kaspersky researchers analyze EAGERBEE backdoor modules, revealing a possible connection to the CoughingDown APT actor.
While investigating an incident involving the BellaCiao .NET malware, Kaspersky researchers discovered a C++ version they dubbed “BellaCPP”.
Lazarus targets employees of a nuclear-related organization with a bunch of malware, such as MISTPEN, LPEClient, RollMid, CookieTime and a new modular backdoor CookiePlus.
Kaspersky researchers analyze 2019, 2022 and 2024 attacks attributed to Careto APT with medium to high confidence.
The hottest research right in your inbox
Yet another Bofra variant