Forest Global Training Partners

Cyber Risks · Unit 42 Palo Alto Networks

2 Minute Threat Brief: Expanding Targets for New Sun Orcal Malware Variant

Summary: Unit 42 investigated a malware family called Reaver, active since late 2016 with only a small number of unique samples, used against movements the Chinese government considers dangerous, known as the "Five Poisons." Reaver shares command-and-control infrastructure with SunOrcal, active since 2013, and a new SunOrcal variant has been observed targeting Vietnam and Myanmar, delivered through phishing emails with malicious attachments, including a Vietnamese-language lure mentioning Donald Trump and the disputed South China Sea.

Bottom line: A threat group that stayed inside its usual target radius since 2013 is now reaching Vietnam and Myanmar, and the delivery method is an email attachment a user has to open - the same phishing step your awareness training and email controls are meant to catch.

Read the original at Unit 42 Palo Alto Networks ↗

Topics
Malware
Related