xHunt Campaign: Attacks on Kuwait Shipping and Transportation Organizations
xHunt deployed custom backdoors Hisoka, Killua, Gon, and EYE against Kuwait shipping and transportation organizations, using DNS tunneling and email-draft C2 channels.
Stories per day · 30 days
1 RSS
3 stories, newest first · one card per story
Stories tagged #xhunt
xHunt Campaign: New PowerShell Backdoor Blocked Through DNS Tunnel Detection
xHunt's new CASHY200 PowerShell backdoor used DNS tunneling for C2; DNS security blocked beaconing at a Kuwait organization in September 2019.
xHunt Campaign: New Watering Hole Identified for Credential Harvesting
Unit 42 tied the xHunt campaign to a watering hole on a Kuwait government website used to passively harvest visitors' NTLM credential hashes.
2