Cyber Risks · Cisco Talos

Threat Source newsletter (Aug. 22)

Summary: Cisco Talos reports that China Chopper, a nine-year-old web shell whose source code is now public, is more prevalent than ever, with three distinct campaigns discovered using it for malicious activity. Talos also found threat actors using the Orcus RAT and RevengeRAT to target government entities, financial services organizations, IT service providers and consultancies.

Bottom line: China Chopper's leaked source code means any threat actor can now wield a nine-year-old tool that still works, and the same actors are pairing it with two popular RATs against government and financial targets.

Read the original at Cisco Talos ↗

Topics
Malware
Related