Andariel Hackers Attacking Asset Management Companies to Inject Malicious Code

The Andariel threat group was observed conducting persistent attacks against domestic businesses, specifically installing MeshAgent for remote screen control while conducting the attack. MeshAgent collects basic system information for remote management and performs activities such as power and account management, chat or message pop-ups, file upload/download, and command execution.  It also has remote desktop support. […]

The post Andariel Hackers Attacking Asset Management Companies to Inject Malicious Code appeared first on GBHackers on Security | #1 Globally Trusted Cyber Security …

account andariel asset asset management attack attacks basic businesses chat code command companies control cyber-attack download file file upload hackers information inject malicious management meshagent message persistent pop power remote management screen system threat threat group upload ups