Security Firm Uncovers 'Strange' Malware in Russian, Iranian Govt Computers
"In September 2015, Kaspersky Lab’s Anti-Targeted Attack Platform discovered anomalous network traffic in a government organization network," reads a report published by the software company on Monday.
"Analysis of this incident led to the discovery of a strange executable program library loaded into the memory of the domain controller server…Additional research revealed signs of a previously unknown threat actor, responsible for large-scale attacks against key governmental entities."
The malware has been discovered on at least 30 targets and has been active for some five years. Given that it went this long without detection, the software firm suspects a state-sponsored group is behind the release.
"The attackers clearly understand that we as researchers are always looking for patterns. Remove the patterns and the operations will be harder to discover," the report reads.
