Attackers with valid network credentials leveraged Microsoft's certutil app and Windows Remote Management's Remote Shell plugin to facilitate the distribution of the PATHLOADER malware, which then executes the C++-based FINALDRAFT remote administration tool, according to a report from Elastic Security Labs.
Introduction to Malware Binary Triage (IMBT) Course
Looking to level up your skills? Get 10% off using coupon code: MWNEWS10 for any flavor.
Enroll Now and Save 10%: Coupon Code MWNEWS10
Note: Affiliate link – your enrollment helps support this platform at no extra cost to you.
Article Link: Threat cluster wreaks havoc with novel FINALDRAFT malware | SC Media