Key findings

• Check Point Research observed a wave of highly-targeted espionage attacks in Libya that utilize a new custom modular backdoor.


• 
  Stealth Soldier malware is an undocumented backdoor that primarily operates surveillance functions such as file exfiltration, screen and microphone recording, keystroke logging and stealing browser information.


• The Stealth Soldier infrastructure overlaps with infrastructure the The Eye on the Nile which operated against Egyptian civilian society in 2019. This is the first re-appearance of this threat actor since then.


• The …

africa attacks backdoor browser check check point espionage exfiltration file findings functions information key keystroke logging logging malware microphone modular north point recording research screen stealing stealth surveillance