Security News BITS and Bytes: Analyzing BITSLOTH, a newly identified backdoor

[[correlate]]

Content source

https://www.elastic.co/security-labs/bits-and-bytes-analyzing-bitsloth

BITSLOTH is a newly discovered Windows backdoor that leverages the Background Intelligent Transfer Service (BITS) as its command-and-control mechanism. BITSLOTH was uncovered during an intrusion within the LATAM region earlier this summer. This malware hasn't been publicly documented to our knowledge and while it’s not clear who’s behind the malware, it has been in development for several years based on tracking distinct versions uploaded to VirusTotal.

The most current iteration of the backdoor at the time of this publication has 35 handler functions including keylogging and screen capture capabilities. In addition, BITSLOTH contains many different features for discovery, enumeration, and command-line execution. Based on these capabilities, we assess this tool is designed for gathering data from victims.

BITS and Bytes: Analyzing BITSLOTH, a newly identified backdoor — Elastic Security Labs

 

[cartaphilus]

BITS and Bytes: Analyzing BITSLOTH, a newly identified backdoor — Elastic Security Labs

Cool thanks!

 

[[correlate]]

Cool thanks!

View attachment 284771

You're welcome. I'm happy to have followers.