Malware

During a recent investigation (REF7707), Elastic Security Labs discovered new malware targeting a foreign ministry. The malware includes a custom loader and backdoor with many features including using Microsoft’s Graph API for C2 communications.

Discover how APT36's ElizaRAT, an evolving malware, leverages cloud services like Slack and Google Drive for cyber espionage.