Malwarecritical
New version of MysterySnail RAT and lightweight MysteryMonoSnail backdoor
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-40449 | Use-After-Free Local Privilege Escalation in Microsoft Windows Win32k | 7.8 | 82% | KEVRansomwarePoC | KEV |
Indicators of compromise
auto-extracted · verify before use · export allAll| Type | Indicator | Context |
|---|---|---|
| domain | leotolstoys.com | ng performed with the following servers: watch-smcsvc[.]com leotolstoys[.]com Having analyzed the set of commands implemented in the la |
| domain | watch-smcsvc.com | communications being performed with the following servers: watch-smcsvc[.]com leotolstoys[.]com Having analyzed the set of commands imp |
From the original article
6 min read at securelist.com
Day after day, threat actors create new malware to use in cyberattacks. Each of these new implants is developed in its own way, and as a result gets its own destiny – while the use of some malware families is reported for decades, information about others disappears after days, months or several years. We observed the latter situation with an implant that we dubbed MysterySnail RAT.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.