Hidden Cobra Strikes Again with Custom RAT, SMB Malware

🗓️ 30 May 2018 14:59:17Reported by Tara SealsType

Hidden Cobra cyber-attacks on U.S. businesses deploying Joanap RAT and Brambul SMB worm targeting media, aerospace, finance and infrastructure sectors. Both malware exfiltrate data, disrupt operations and spread through SMB for Windows attacks

Source	Link
us-cert	www.us-cert.gov/ncas/alerts/TA18-149A
threatpost	www.threatpost.com/eternalblue-exploit-used-in-retefe-banking-trojan-campaign/128103/
us-cert	www.us-cert.gov/hiddencobra
us-cert	www.us-cert.gov/ncas/analysis-reports/AR18-149A
threatpost	www.threatpost.com/fbi-officially-blames-north-korea-in-sony-hacks/109999/
threatpost	www.threatpost.com/lazarus-apt-spinoff-linked-to-banking-hacks/124746/
threatpost	www.threatpost.com/dhs-fbi-warn-of-north-korea-hidden-cobra-strikes-against-us-assets/126263/
threatpost	www.threatpost.com/thaicert-seizes-hidden-cobra-server-linked-to-ghostsecret-sony-attacks/131498/
securingtomorrow	www.securingtomorrow.mcafee.com/mcafee-labs/analyzing-operation-ghostsecret-attack-seeks-to-steal-data-worldwide/

30 May 2018 14:59Current

0.3Low risk

Vulners AI Score0.3