Tag: burnbook

1 Attack Reports | 0 Vulnerabilities

Attack reports

An Offer You Can Refuse: Backdoor Deployment Using Trojanized PDF Reader

UNC2970, a suspected North Korean cyber espionage group, targeted critical infrastructure sectors using job-themed phishing lures. The group employed a trojanized version of SumatraPDF to deliver the MISTPEN backdoor via the BURNBOOK launcher. The infection chain involved a password-protected ZIP a…
backdoor
phishing
2024-09-18
burnbook
Published: September 18, 2024
Downloadable IOCs: 14
Click here to see more Attack Reports