Ebryx forensic analysts have identified an organized criminal group in the South-Asian region utilizing an ATM malware to dispense cash directly from the ATM tray. In almost all the attacks, the criminals specifically chose the NCR ATMs as the malware exploits a fundamental flaw in how the ATM application communicates with the ATM cash dispenser. … Read more
Published: Mon 29 Nov, 21 Background While chasing the spear-phishing campaigns carried out in the South-Asian region by the well-known threat activity group “Sidewinder” (a.k.a Rattlesnake, T-APT-04), Ebryx research team witnessed the evolution of Sidewinder’s tactics and arsenal as it made attempts to evade detection and achieve its operational objectives. Sidewinder’s tools of choice for … Read more
Published: Tue 26 Oct, 21Acknowledgements: Dr. Farrukh Shahzad Background Confucius, an Indian state-sponsored APT group, continues to target Defense and Government organizations in South-Asia, especially Pakistan. The primary purpose of the TA appears to conduct espionage campaigns and steal information critical to the operations of the targeted institutes. In August 2021, the release of Amnesty … Read more
