ToddyCat’s Email Heist: New Tricks Unveiled in Corporate Espionage Saga
ToddyCat, the cyber-sneaker extraordinaire, is back with new tricks! Using TCSectorCopy, they’re bypassing security faster than a cat on a hot tin roof. Who knew a hacking group could be as agile as their feline namesake? Kaspersky warns: if your emails start hissing, it might be ToddyCat at play!
Hot Take:
Move over, James Bond! ToddyCat is the new master of espionage, infiltrating corporate emails with a toolset that would make Q swoon. This cyber-spy is using TCSectorCopy like a tech-savvy cat burglar, sneaking into email vaults without tripping any alarms. Grab your popcorn because this digital drama is one for the books!
Key Points:
- ToddyCat is using a new custom tool called TCSectorCopy to access corporate email data.
- The group utilizes OAuth 2.0 tokens and targets various browsers for data extraction.
- ToddyCat has been active since 2020, mainly in Europe and Asia.
- They exploit vulnerabilities like CVE-2024-11859 to deliver malware such as TCESB.
- Efforts to access Microsoft 365 tokens face resistance from security software.
Already a member? Log in here