simontsui, Mandiant reported on UNC4990, an actor who heavily uses USB devices for initial infection. UNC4990 primarily targets users based in Italy and is likely motivated by financial gain. Our research shows this campaign has been ongoing since at least 2020. IOC provided.
🔗 https://www.mandiant.com/resources/blog/unc4990-evolution-usb-malware
See related Ars Technica article: https://arstechnica.com/security/2024/01/ars-technica-used-in-malware-campaign-with-never-before-seen-obfuscation/
Add comment