BONDUPDATERMalware
- Glimpse
- poison frog
BONDUPDATER is a PowerShell backdoor used by OilRig. It was first observed in November 2017 during targeting of a Middle Eastern government organization, and an updated version was observed in August 2018 being used to target a government organization with spearphishing emails.From MITRE ATT&CK
Last reported 2 months ago, by Hudson Rock (Infostealers)1 report
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
Analyzing Stripe Vendors Breach: Confirmed Vendor Exposure and Claims of 20,000 Compromised APIs“The Initial Release: A Glimpse into the Compromise”
Thanks — we review every report.