Hookball Backpack has attacked Asian institutions

Recently discovered bad gates that recently appeared in one or more campaigns
According to a blog post, Russian-speaking Central Asian government
[This week
From the fire lab

Hackball provides an unknown attacker and a successful transition
Author of blog posts on the boundaries of bad talent, firearms and
Swapnil Patil, a malware researcher. Recording and
Gather victims information; Pay too much; It appears
Pipe to execute local Windows commands; Complete the process;
Create, delete and transfer files; And a math manager

To keep the door open, the attackers used a malicious bug file
Draw the attention of organizations against terrorism
The Soviet community became an independent nation
In the United States, Teku document titles are almost translated into Russian
English as a set of guidelines against terrorism
Social security units and specialized services in CIS countries.

Says Benjamin Reed, former manager of Cyber Intelligence Analytics
Firefighters investigators believe they used a malicious file
February 2019 2019. We have no specific knowledge of the target component,
Although it is estimated that all inspired content is attractive
Arakuset.

Opening a malicious file starts with an infected network that supports it
Microsoft Office is full of the last two memories
Blot Cave – 2017-01882 (available for Microsoft Office
2007 Service Pack 3, Microsoft Office 2010 Service Pack 2, Microsoft
Office 2013 Service Pack and Microsoft Office 2016) and CVE-2018-0802
(Formula Editor is available for Microsoft Office 2007, 2010, 2013)
2016)

Hawkball is connected to a powerful C2 server via HTTP.
View information about people involved, including computer name, domain name
Name, IP address, OEM page, e, operating system type, creation information and much more.
To check this, take at least two steps.
Be wary of mistakes.

Contact SC Media FireA for more information on the Hawkeball attack.