#dunequixote — Public Fediverse posts

Kaspersky reports on a malware campaign (dubbed DuneQuixote) targeting government entities in the Middle East. Two droppers used (including a trojanized installer for a legitimate tool called Total Commander) downloads a payload for a new backdoor called CR4T. The group behind the campaign took steps to prevent collection and analysis of its implants and implemented practical and well-designed evasion methods both in network communications and in the malware code. Technical analysis and IOC provided. 🔗 https://securelist.com/dunequixote/112425/

#DuneQuixote #cyberespionage #threatintel #TotalCommander #CR4T #IOC