OpenSUpdaterMalware
Last reported 24 days ago, by Risky Business News1 report
ATT&CK techniques
3 techniques · each with the sentence it comes from- T1014Rootkit
“SIXZUT and JITTERLY: Newly launched security firm VirLabs looks at SIXZUT and JITTERLY, a Linux implant and a rootkit that are being planted by the Red Heron group on Gitea servers.”
- T1053.005Scheduled Task
“The phishing emails are delivering malicious archive files that use virtual hard disks to create scheduled tasks that periodically run the group's malware.”
- T1176.001Browser Extensions
“Malicious browser extensions: Security researchers have discovered a cluster of more than 30 malicious Chrome extensions posing as financial advice tools.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
1 report, newest first · the exact sentence from each-
Risky Bulletin: Sanctions force CAs to revoke TLS certs in Iran, Russia“OpenSUpdater: A threat actor is hiding the OpenSUpdater loader inside recompiled open source software tools like 7zip.”
Indicators in its reports
named in the reports above- kevinhardiman.bsky[.]socialin 1 report
- kevincollier.bsky[.]socialin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.