Antivirus updates exploited for GuptiMiner malware deployment

Intrusions hijacking the eScan antivirus software's updating mechanism have been conducted by threat actors suspected to be linked to North Korean advanced persistent threat operation Kimsuky to facilitate the delivery of the sophisticated GuptiMiner malware that would then distribute cryptocurrency mining payloads, according to BleepingComputer.

Article Link: Antivirus updates exploited for GuptiMiner malware deployment | SC Media

1 post - 1 participant

Read full topic

advanced advanced persistent threat antivirus antivirus software antivirus updates article bleepingcomputer cryptocurrency cryptocurrency mining delivery deployment escan antivirus exploited guptiminer hijacking kimsuky link malware mechanism mining north north korean payloads persistent persistent threat software threat threat actors updates