StrikeShark campaign: New SharkLoader malware delivers Cobalt Strike Beacon globally
By
Fareed Radzi
Summary
Kaspersky researchers uncovered a previously undocumented malware family called SharkLoader during an investigation into activity affecting a diplomatic organization in Indonesia. The campaign, dubbed StrikeShark, has expanded beyond the initial case to infect systems across multiple countries and sectors. SharkLoader is a loader designed to deploy Cobalt Strike Beacon on compromised systems, delivered through exploitation of internet-facing applications. The analysis details the technical infrastructure, attack vectors, and global scope of this emerging cyber threat.
Source
bskyStrikeShark campaign: New SharkLoader malware delivers Cobalt Strike Beacon globallysecurelist.comKey quotes
· 4 pulledDuring our research of activity affecting a diplomatic organization in Indonesia, we uncovered a previously undocumented malware family that we have named SharkLoader.
What initially appeared to be an isolated case quickly expanded into a broader campaign as we identified additional SharkLoader infections across multiple countries and sectors.
Our investigation revealed that SharkLoader serves as a loader designed to deploy Cobalt Strike Beacon on compromised systems.
We observed the threat actor deploying SharkLoader through exploitation of internet-facing applications.
You might also wanna read
Kaspersky Researchers Document New Infection Chains and IoCs in Notepad++ Supply Chain Attack
Kaspersky GReAT experts discovered previously undocumented infection chains used in the Notepad++ supply chain attack that occurred from Jun
securelist.com·5mo ago
Polish Energy Grid Targeted by Wiper Malware, Likely from Russian State Hackers
Polish electric grid was targeted by wiper malware, likely from Russian state hackers, in an attempt to disrupt electricity delivery operati
arstechnica.com·5mo agoVoid Manticore Combines Data Theft And Wiper Malware
U of T researchers discover AI worm that can spread across online devices and hijack networks
University of Toronto researchers have discovered a new class of cyberthreat — an AI-powered worm that can adapt its strategy as it spreads
utoronto.ca·1mo ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.