#ESETresearch investigated Donot Team’s (also known as APT-C-35 and SectorE02) #cyberespionage campaigns targeting military organizations, governments, Ministries of Foreign Affairs, and embassies of countries in South Asia. welivesecurity.com/2022/01/18/don… 1/5
A recent report by #Amnesty International links the group’s malware to an Indian cybersecurity company that be selling the spyware to entities in the region. 2/5
ESET’s investigation spans from September 2020 to October 2021 and details variants of the yty malware framework used to target entities in Bangladesh 🇧🇩, Sri-Lanka 🇱🇰, Pakistan 🇵🇰 and Nepal 🇳🇵. But also embassies in the Middle East, Europe, North and South America. 3/5
The group has consistently targeted the same organizations for years and it’s possible that the attackers have compromised the emails accounts of some of their victims to send #spearphishing emails with documents containing #malware. More details in our blogpost. 4/5
The full list of IoCs is available in our GitHub repository github.com/eset/malware-i… #ESETresearch 5/5
• • •
Missing some Tweet in this thread? You can try to
force a refresh
