"ScreenConnect Flaws Used to Deploy ToddlerShark Malware"
TL;DR Summary
North Korean threat actors have exploited vulnerabilities in ConnectWise ScreenConnect to deploy a new malware called TODDLERSHARK, which overlaps with known Kimsuky malware such as BabyShark and ReconShark. The malware is designed to capture and exfiltrate sensitive information about compromised hosts and exhibits polymorphic behavior to evade detection. South Korea's National Intelligence Service has accused North Korea of compromising the servers of two domestic semiconductor manufacturers and pilfering valuable data, with the intrusions taking place in December 2023 and February 2024.
- Hackers Exploit ConnectWise ScreenConnect Flaws to Deploy TODDLERSHARK Malware The Hacker News
- North Korea Hits ScreenConnect Bugs to Drop 'ToddleShark' Malware Dark Reading
- ScreenConnect flaws exploited to drop new ToddlerShark malware BleepingComputer
- New Malware Variant Deployed in ScreenConnect Flaw Exploits Duo Security
- Cyber Security Today, March 6, 2024 – VMware and Apple rush out security updates, a new ScreenConnect malware is found, and more IT World Canada
Reading Insights
Total Reads
0
Unique Readers
1
Time Saved
2 min
vs 3 min read
Condensed
82%
450 → 81 words
Want the full story? Read the original article
Read on The Hacker News