Threat Source newsletter for May 28, 2020
Summary: Cisco Talos reports that the EVILNUM malware family is continuously adding anti-detection techniques while its operators target financial-sector organizations, using it alongside Cardinal RAT; as of earlier this month only eight VirusTotal engines detected it. Attackers are also exploiting two recently disclosed SaltStack automation software vulnerabilities against data centers, with victims so far hit only by cryptocurrency mining malware.
Why it matters: Eight detection engines out of the dozens on VirusTotal is a thin margin for malware aimed at financial organizations, and the actors' prior targeting of Israel offers no clue where they strike next.
Read the original at Cisco Talos ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026