Title: What did DeathStalker hide between two ferns?
Published: Thu, 03 Dec 2020 10:00:58 +0000
Description: While tracking DeathStalker’s Powersing-based activities in May 2020, we detected a previously unknown implant that leveraged DNS over HTTPS as a C2 channel, as well as parts of its delivery chain. We named this new malware “PowerPepper”.
Read full article on SECURELIST.COM