Kaspersky: A complex malware campaign is targeting organizations in Asia, Latin America, and Europe - CNews

▤ Summary

Kaspersky describes an active malware campaign targeting organizations across Asia, Latin America, and Europe. The attack chain uses SharkLoader to deliver DLL-based payloads on Windows systems and can enable Cobalt Strike Beacon deployment. The attackers appear to abuse trusted software and services such as Microsoft Exchange, Microsoft SharePoint, Openfire, Google Update, Cisco AnyConnect, and PDF-related processes to spread or hide activity. Kaspersky recommends tighter email and website filtering, endpoint controls, continuous monitoring, and security awareness training to reduce exposure.

▦ Linked Companies

Kaspersky Lab

$500M to $1B