Cyber Risks · Cisco Talos

Threat Source newsletter (March 31, 2022) — Is "Fortnite" a Metaverse?

Summary: Cisco Talos published new research into Web 3.0 and the Metaverse examining security pitfalls ahead and how attackers already use the Metaverse to spread spam and malware. The same newsletter reports the Transparent Tribe actor running a campaign since at least June 2021 against Indian government agencies and users, using fake domains mimicking government organizations to deliver a previously unknown Python-based stager that leads to .NET-based reconnaissance tools and RATs.

Bottom line: Transparent Tribe has been tracked since March 2021 and keeps adding new RATs, OS-specific malware and spoofing methods, with no guarantee its targeting stays confined to India.

Read the original at Cisco Talos ↗

Topics
Malware
Related