Researchers have found a potentially dangerous cyberattack framework targeting Windows, Linux, and Mac systems that is already being used in the wild. The Alchimist tool is written in GoLang and is deployed on servers as a single standalone file that contains both the implants as well as the user interface that attackers use to interact with their victims’ systems. Alchimist can establish remote sessions, deploy payloads to the remote machines, capture screenshots, perform remote shellcode execution and run arbitrary commands.
Threat Profile:[/subscribe_to_unlock_form]
Researchers have found a potentially dangerous cyberattack framework targeting Windows, Linux, and Mac systems that is already being used in the wild. The Alchimist tool is written in GoLang and is deployed on servers as a single standalone file that contains both the implants as well as the user interface that attackers use to interact with their victims’ systems. Alchimist can establish remote sessions, deploy payloads to the remote machines, capture screenshots, perform remote shellcode execution and run arbitrary commands.
Threat Profile:[emaillocker id="1283"]
References:
The following reports contain further technical details:
(Kindly exclude this link in the advisory mail)
https://raw.githubusercontent.com/Cisco-Talos/IOCs/main/2022/10/alchimist-offensive-framework.txt
[/emaillocker]