pyinstaller (2)

31151147680?profile=RESIZE_400xCybersecurity researchers at Point Wild recently found a new way that cyber-attackers are gaining unauthorized access to computers.  The investigation, led by experts Kedar Shashikant Pandit, Prathamesh Shingare, and Amol Swami from the Lat61 Threat Intelligence Team, reveals that a common tool used by legitimate developers is being twisted by hackers to hide a nasty malware called XWorm.

Attack Details - The attack starts with a trick email or a fake software update, involving a harmless-lookin

10468875068?profile=RESIZE_400xActivity Summary - Week Ending on 6 May 2022:

  • Red Sky Alliance identified 43,915 connections from new IP’s checking in with our Sinkholes
  • msk.ru still #1 in Hits
  • Analysts identified 1,442 new IP addresses participating in various Botnets
  • CVSS
  • Using Emulation
  • BotenaGo Variant
  • PyInstaller
  • Inmarsat
  • 5 Constant Malware Issues

Link to full report: IR-22-126-001_weekly126.pdf