Tag: quickheal

2 Attack Reports | 0 Vulnerabilities

Attack reports

A PAINFUL QUICKHEAL

This report analyzes a QUICKHEAL malware sample associated with the Chinese PLA-linked Needleminer group. The 32-bit DLL, protected by VMProtect, targets the telecom sector and was compiled in April 2022. It can steal credentials from Firefox and Internet Explorer browsers. The malware communicates…

Published: December 16, 2024

Downloadable IOCs: 0

Sustained Campaign Using Chinese Espionage Tools Targets Telcos

Attackers using tools associated with Chinese espionage groups have breached multiple telecom operators in a single Asian country in a long-running espionage campaign. The attackers placed backdoors on the networks of targeted companies and also attempted to steal credentials.

credential theft

telecommunications

Published: June 20, 2024

Downloadable IOCs: 47

Click here to see more Attack Reports