Summary:
Researchers have found that hackers are targeting online gaming and gambling companies. The malware appears to be a previously unseen backdoor that researchers have named IceBreaker. The compromising technique relies on tricking customer service agents to open malicious screenshots that a threat actor sends pretending to be a user having problems logging in or registering for the online service. The image is typically hosted on a fake website that impersonates a legitimate service. The delivered links contain a malicious LNK file that fetches the Icebreaker backdoor.[/subscribe_to_unlock_form]
Summary:
Researchers have found that hackers are targeting online gaming and gambling companies. The malware appears to be a previously unseen backdoor that researchers have named IceBreaker. The compromising technique relies on tricking customer service agents to open malicious screenshots that a threat actor sends pretending to be a user having problems logging in or registering for the online service. The image is typically hosted on a fake website that impersonates a legitimate service. The delivered links contain a malicious LNK file that fetches the Icebreaker backdoor.[emaillocker id="1283"]
Threat Profile:
References:
The following reports contain further technical details:
[/emaillocker]