Recently, from around june through september 2022, a social engineering campaign, attributed to a nation-state group, has been u

Question

1 year ago

12

Recently, from around june through september 2022, a social engineering campaign, attributed to a nation-state group, has been u

tilizing trojan versions of open-source software during their attack chain to achieve backdoor access. What is the commonly attributed name of the threat actor and an example of one of the open-source software that they have trojanized?.

Computers and Technology

1 answer:

Archy [21] · Answer 1 · 2024-04-17T08:09:16+03:00

The commonly attributed name of the threat actor is called ZINC. A wide range of social engineering campaigns using weaponized legitimate open-source software by an actor tracked as ZINC.

ZINC weaponizing a wide range of open-source software including PuTTY, KiTTY, TightVNC, Sumatra PDF Reader, and muPDF/Subliminal Recording software installer for these attacks.

Who is ZINC?

ZINC is a nation-state activity group that is highly operational, destructive, and sophisticated. Active since 2009, the activity group gained public attention in 2014 after a successful attack on Sony Pictures Entertainment. ZINC is known to employ a number of custom remote access tools (RATs), including those identified by Microsoft as FoggyBrass and PhantomStar.

ZINC seeks to coerce employees of companies it is attempting to infiltrate into installing seemingly benign programs or opening weaponized documents containing malicious macros.

To know more about Open Source Software(OSS), visit: brainly.com/question/4593389

#SPJ4