Secret Blizzard’s Cyber Shenanigans: Hijacking Malware for Espionage Escapades in Ukraine
Secret Blizzard is at it again, using malware from other cybercriminals to deploy its Kazuar backdoor in Ukraine. Known for its strategic web compromises and spear-phishing, this Russian actor hijacks others’ access to diversify attacks. It’s like borrowing a friend’s car for a heist, but without returning it.
Hot Take:
*The Russians are at it again, but this time it seems like they’re shopping in the malware aisle of the cyber supermarket. Can someone please tell Secret Blizzard that imitation is not always the sincerest form of flattery?*
Key Points:
– Secret Blizzard, aka Turla, is using malware from other threat actors to deploy its own backdoor, Kazuar, on Ukrainian devices.
– The group has been observed using Amadey bot malware to target the Ukrainian military.
– This is the second time since 2022 that Secret Blizzard has adopted this approach in Ukraine.
– Secret Blizzard is known for targeting government and defense-related entities globally.
– The group has recently hijacked command-and-control servers from other hacking groups to aid its operations.