Tag: mgbot

2 Attack Reports | 0 Vulnerabilities

Attack reports

Evasive Panda scouting cloud services

CloudScout is a post-compromise toolset used by Evasive Panda to target a Taiwanese government entity and religious organization between 2022 and 2023. The toolset can retrieve data from various cloud services using stolen web session cookies. It works with MgBot, Evasive Panda's malware framework,…
apt
china
cyberespionage
taiwan
mgbot
cloud services
2024-10-28
nightdoor
cookie theft
cloudscout
Published: October 28, 2024
Downloadable IOCs: 17

Daggerfly: Espionage Group Makes Major Update to Toolset

An advanced persistent threat (APT) group, known as Daggerfly or Evasive Panda, has significantly updated its malware arsenal. The group has introduced new versions of its modular backdoor framework MgBot for multiple platforms, including Windows, Linux, macOS, and Android. Symantec researchers hav…
2024-07-23
dazzlespy
mgbot
macma
Published: July 23, 2024
Linked vulnerabilities : CVE-2021-30869
Downloadable IOCs: 20
Click here to see more Attack Reports