New Threat Group Targets Middle Eastern Telcos

A previously unknown attack group has been targeting telecommunications providers in Middle Eastern countries with a custom backdoor that in some cases is disguised as a legitimate security application.

The new threat group appears to have been operating for several years at least and researchers with Cisco Talos have named the group ShroudedSnooper. The group uses at least two separate implants, known as HTTPSnoop and PipeSnoop, and likely is gaining initial access to its targets by compromising Internet-facing servers. …

application attack backdoor cases cisco cisco talos countries researchers security security application shroudedsnooper talos targeting telecommunications threat threat group