FatDukeMalware

According to ESET Research, FatDuke is the current flagship backdoor of APT29 and is only deployed on the most interesting machines. It is generally dropped by the MiniDuke backdoor, but ESET also have seen the operators dropping FatDuke using lateral movement tools such as PsExec. The operators regularly repack this malware in order to evade detections.From MISP Galaxy

0 reports