Displaying items by tag: Backdoor

One of the many tools used by multiple ransomware groups in a similar way — suggesting that they are being used by ransomware-as-a-service affiliates — is the Windows backdoor SystemBC, global cyber security vendor Sophos claims.

Veteran security researcher Brian Bartholomew has cast doubt on claims made about attacks by a nation-state backed group on a Chinese VPN provider whose software was used by the Beijing government and its overseas agencies. The allegations were made by Chinese security firm 360 Core Security (Qihoo Security) in a blog post on 6 April.

An attack group named Orangeworm is using a backdoor known as Kwampirs to target Windows machines in the healthcare sector and related industries in the US, Europe and Asia.