Briefing Malware - 22/06/2021

22nd of June 2021 - Winners of the 25th week : njRAT, Redline and Lokibot.

Some links points at extended actionnable intelligence (Threat Bulletins, TTPs, signatures, etc) on our Threat Intelligence Platform Anomali. This access is limited to our clients.

Threat statistics report

Publication date:	22/06/2021
Distribution :	TLP : WHITE

What's new?

Redline (NC)

Digital artists targeted in RedLine infostealer campaign

Multiple accomplished digital artists report on Twitter that they got hacked after being approached to create new digital art. They were approached either via Instagram, Twitter DM (message) or directly via email. The attackers have masqueraded themselves to appear from the genuine Skylum product website; often claiming to be from South Korea while redirecting artists towards a fake clone of the Skylum website. The victim was asked to download an archive from this site, where the archive contained Redline stealer malware inside an Exe.

https://securityboulevard.com/2021/06/digital-artists-targeted-in-redline-infostealer-campaign/

Download the report

Cookies	Description
Registered visitor cookie	Cookie given to each registered user.
Registered visitor functionality cookie	Cookies used to remember the unique identifier given to each registered user.
Social plug-in content sharing cookie	Cookies set by services such as Facebook Connect or Twitter Button, which allow social networks users to share the content of our websites on social networks.
Unregistered visitor cookie	Cookies used to give to unregistered users a unique identifier in order to recognize them and to analyze how they use the website.
Analytic cookie	Cookies used to store URLs of the previous page visited, enabling to track users navigating from inside or from outside the website. If you click on a Sogeti advertisement on a non-Sogeti website, a cookie may be used to log which website you are on, in order to ensure our advertisements are served effectively and to measure whether our advertisements are viewed. Google Analytics: cookies set by Google analytics are used for web analytical purpose, but are not used to track individual users. For further information on how Google Analytics collects and uses information on our behalf and the right to use such cookies, please refer to the Google Analytics products and services privacy statement. If you object to your Personal Data being collected by Google Analytics, you may download and install the Google Analytics Opt-out Browser Add-on. Pardot: cookies set by Pardot are used to track users on our website. Visits are tracked for known users only. Unknown users are recorded as anonymous users. Please refer to Pardot privacy policy for any further information on their use and your rights related to the use of such cookies.