Ex-Conti and FIN7 Actors Collaborate with New Domino Backdoor

This blog was made possible through contributions from Christopher Caridi. 

IBM Security X-Force recently discovered a new malware family we have called “Domino,” which we assess was created by developers associated with the cybercriminal group that X-Force tracks as ITG14, also known as FIN7. Former members of the Trickbot/Conti syndicate which X-Force tracks as ITG23 have been using Domino since at least late February 2023 to deliver either the Project Nemesis information stealer or more capable backdoors such as Cobalt …

backdoor backdoors blog called cobalt cobalt strike conti cooperation cybercriminal developers discovery domino domino backdoor family february fin7 ibm ibm security information information stealer malware nature project security stealer strike trickbot x-force