Thursday, May 25, 2023

Hacker Group 'Moses Staff' Using New StrifeWater RAT In Ransomware Attacks

 


A politically motivated hacker group tied to a series of espionage and sabotage attacks on Israeli entities in 2021 incorporated a previously undocumented remote access trojan (RAT) that masquerades as the Windows Calculator app as part of a conscious effort to stay under the radar.

Cybersecurity company Cybereason, which has been tracking the operations of the Iranian actor known as Moses Staff, dubbed the malware "StrifeWater."

"The StrifeWater RAT appears to be used in the initial stage of the attack and this stealthy RAT has the ability to remove itself from the system to cover the Iranian group's tracks," Tom Fakterman, Cybereason security analyst, said in a report. "The RAT possesses other capabilities, such as command execution and screen capturing, as well as the ability to download additional extensions."

Moses Staff came to light towards the end of last year when Check Point Research unmasked a series of attacks aimed at Israeli organizations since September 2021 with the objective of disrupting the targets' business operations by encrypting their networks, with no option to regain access or negotiate a ransom.

The intrusions were notable for the fact that they relied on the open-source library DiskCryptor to perform volume encryption, in addition to infecting the systems with a bootloader that prevents them from starting without the correct encryption key.


To date, victims have been reported beyond Israel, including Italy, India, Germany, Chile, Turkey, the U.A.E., and the U.S.

The new piece of the attack puzzle discovered by Cybereason comes in the form of a RAT that's deployed under the name "calc.exe" (the Windows Calculator binary) and is used during the early stages of the infection chain, only to be removed prior to the deployment of the file-encrypting malware.

The removal and the subsequent replacement of the malicious calculator executable with the legitimate binary, the researchers suspect, is an attempt on the part of the threat actor to cover up tracks and erase evidence of the trojan, not to mention enable them to evade detection until the final phase of the attack when the ransomware payload is executed.

StrifeWater, for its part, is no different from its counterparts and comes with numerous features, chief among them being the ability to list system files, execute system commands, take screen captures, create persistence, and download updates and auxiliary modules.

"The end goal for Moses Staff appears to be more politically motivated rather than financial," Fakterman concluded. "Moses Staff employs ransomware post-exfiltration not for financial gain, but to disrupt operations, obfuscate espionage activity, and to inflict damage to systems to advance Iran's geopolitical goals."

Related news


  1. Hack App
  2. Hacker Tools Github
  3. Pentest Tools Online
  4. Best Hacking Tools 2020
  5. How To Make Hacking Tools
  6. How To Hack
  7. Hacking Tools Download
  8. Hacker Tools Online
  9. Hack And Tools
  10. Hacker Tools Mac
  11. Hacking Tools For Windows Free Download
  12. Termux Hacking Tools 2019
  13. Hack App
  14. Hacker Tools Windows
  15. Hacker Tools Free
  16. Hacker Techniques Tools And Incident Handling
  17. Hacking Tools Github
  18. Hack Tools 2019
  19. Hacking Tools Mac
  20. Computer Hacker
  21. Hacker
  22. Hacker Tools Apk Download
  23. Hacker Tools 2019
  24. Hack And Tools
  25. Hacker Tools Windows
  26. Best Pentesting Tools 2018
  27. Best Hacking Tools 2019
  28. Hacking Tools For Pc
  29. Hacking Tools Free Download
  30. Nsa Hack Tools
  31. Underground Hacker Sites
  32. Hack Tools 2019
  33. Pentest Tools Framework
  34. Hacker Tools Software
  35. Hacker Tools 2020
  36. Hacking Tools 2019
  37. Pentest Tools Website Vulnerability
  38. Hack Rom Tools
  39. Hacking Tools Usb
  40. Physical Pentest Tools
  41. Computer Hacker
  42. Hack App
  43. Hacking Tools Free Download
  44. Bluetooth Hacking Tools Kali
  45. World No 1 Hacker Software
  46. Hacker Techniques Tools And Incident Handling
  47. Hacking Tools Free Download
  48. Github Hacking Tools
  49. Hack Tools For Ubuntu
  50. Hacker Tools List
  51. Hacking Tools And Software
  52. Ethical Hacker Tools
  53. Hacking Tools Pc
  54. Best Hacking Tools 2019
  55. Hacker Tools Apk
  56. Hacker Tools Linux
  57. How To Make Hacking Tools
  58. Hacking Tools For Mac
  59. Hack Rom Tools
  60. Hacker Tools For Ios
  61. Hack Tools Github
  62. New Hack Tools
  63. Pentest Tools For Mac
  64. Hacker Tools Linux
  65. Pentest Tools Kali Linux
  66. Hacker Tools Windows
  67. Hack Tools For Ubuntu
  68. Hacking Tools Pc
  69. Pentest Tools Nmap
  70. Pentest Tools
  71. Pentest Tools Apk
  72. Pentest Tools Find Subdomains
  73. Pentest Tools For Mac
  74. Hack Tools For Games
  75. Hacking Tools Name
  76. Hacker Search Tools
  77. Hack Tools
  78. Hacks And Tools
  79. Tools 4 Hack
  80. Hacking Tools Kit
  81. Hacking Tools Name
  82. Hacking Tools For Beginners
  83. Hacking Tools For Windows
  84. Hacker Tools 2019
  85. Install Pentest Tools Ubuntu
  86. Hacking Tools For Games
  87. Pentest Tools Framework
  88. New Hacker Tools
  89. Black Hat Hacker Tools
  90. Hacker Tools Windows
  91. Pentest Tools Android
  92. Hacker Tools Github
  93. Pentest Tools List
  94. Nsa Hack Tools
  95. Hacking Tools
  96. Hacking Tools Github
  97. Hack Tools For Games
  98. Hacking Tools For Windows Free Download
  99. Hacking Tools For Windows 7
  100. Hack Rom Tools
  101. Tools 4 Hack
  102. Hacking Tools Software
  103. Hacker Tools Linux
  104. Hacking Tools And Software
  105. Hak5 Tools
  106. Hacking Tools Usb
  107. Nsa Hacker Tools
  108. Easy Hack Tools
  109. Hack Tools For Windows
  110. Hacker
  111. Hacker Tools Free
  112. Install Pentest Tools Ubuntu
  113. Easy Hack Tools
  114. Pentest Tools Free
  115. Hacking Apps
  116. Ethical Hacker Tools
  117. Hacker Tools 2020
  118. Free Pentest Tools For Windows
  119. Hacking App
  120. Hacking Tools For Games
  121. Install Pentest Tools Ubuntu
  122. Install Pentest Tools Ubuntu
  123. Hacker Tools List
  124. Pentest Tools Find Subdomains
  125. Hacking Tools For Kali Linux
  126. Hack Tools Github
  127. Hack Rom Tools
  128. Hacking Tools Pc
  129. Blackhat Hacker Tools
  130. Pentest Tools Github
  131. Hacker Tools 2019
  132. Pentest Tools Free
  133. Hacking Tools For Games
  134. Hacking Tools For Pc
  135. Growth Hacker Tools
  136. Nsa Hacker Tools
  137. Hacking Tools Download
  138. Hacker Tool Kit
  139. Hack Tools Download
  140. Install Pentest Tools Ubuntu
  141. Pentest Tools Github
  142. Hackers Toolbox
  143. Kik Hack Tools
  144. Beginner Hacker Tools
  145. Hacking Apps
  146. Hacking Tools For Kali Linux
  147. Install Pentest Tools Ubuntu
  148. Beginner Hacker Tools
  149. Pentest Tools Online
  150. Free Pentest Tools For Windows
  151. Nsa Hack Tools
  152. Pentest Tools Website Vulnerability
  153. Hacker
  154. Pentest Tools Port Scanner
  155. Pentest Tools Download
  156. Hacker Tools Free
  157. Pentest Tools Windows
  158. Tools 4 Hack

No comments:

Post a Comment