#windows-malware

Analyzing OBSCURE#BAT: Threat Actors Lure Victims into Executing Malicious Batch Scripts to Deploy Stealthy Rootkits - Securonix

Discover the DEEP#DRIVE campaign targeting South Korea, attributed to North Korea's Kimsuky APT group. Learn about phishing tactics, PowerShell obfuscation, Dropbox-hosted payloads, and key cybersecurity recommendations.

#evasive-malware #windows-malware #windows-rootkit #userland-rootkit

·securonix.com·Mar 13, 2025

Analyzing OBSCURE#BAT: Threat Actors Lure Victims into Executing Malicious Batch Scripts to Deploy Stealthy Rootkits - Securonix

You've Got Malware: FINALDRAFT Hides in Your Drafts — Elastic Security Labs

During a recent investigation (REF7707), Elastic Security Labs discovered new malware targeting a foreign ministry. The malware includes a custom loader and backdoor with many features including using Microsoft’s Graph API for C2 communications.

#odd-c2 #windows-malware

·elastic.co·Feb 12, 2025

You've Got Malware: FINALDRAFT Hides in Your Drafts — Elastic Security Labs