Researchers reveal details of active 'Comfoo' cyberespionage campaign

[InfoSec News <alerts () infosecnews org>]

http://www.zdnet.com/researchers-reveal-details-of-active-comfoo-cyberespionage-campaign-7000018907/

By Charlie Osborne
Zero Day
ZDNet News
August 2, 2013

A cyberespionage campaign which targeted the RSA in 2010 is still active 
and targeting networks worldwide.

Dell SecureWorks researchers Joe Stewart and Don Jackson have released a 
new threat intelligence report documenting the "Comfoo" remote access 
trojan (RAT) -- malware used to infiltrate corporate and governmental 
networks across the globe.

The so-called Advanced Persistent Threat (APT) attack is simply one of 
many that organizations are scrambling to defend against as cyberthreats 
become more sophisticated, and in some cases, state-sponsored.

Corporations and governments rely heavily upon digital networks to store 
valuable data. Bank accounts, national security data, trade secrets and 
confidential governmental programs are only some targets which can be 
lucrative for a hacker to acquire -- whether for personal gain or on a 
competitor's orders. As a result, the cybercrime market is booming -- and 
we often see reports of household name businesses and agencies gaining 
cybercriminal attention.

APT attacks stand apart from garden variety script-kiddies or low-profile 
fraudulent schemes. Those behind APT attacks are often well-trained and 
have access to resources and funding. As data from corporations and 
governments can be so valuable, with the time and money to spend, hackers 
are able to "exercise virtually unlimited patience in penetrating and 
persisting inside their specific target's network until they accomplish 
their goals," according to the researchers.

[...]



--
Find the best InfoSec talent without breaking your budget!
Post a Job! $99 for 31 days
http://www.hotinfosecjobs.com/