Fake Palo Alto GlobalProtect used as lure to backdoor enterprises
https://www.bleepingcomputer.com/news/security/fake-palo-alto-globalprotect-used-as-lure-to-backdoor-enterprises/
Threat actors target Middle Eastern organizations with malware disguised as the legitimate Palo Alto GlobalProtect Tool that can steal data and execute remote PowerShell commands to infiltrate internal networks further.
originally posted at https://stacker.news/items/667914
ch0k1
npub1k3…q9t9m
2024-08-31 15:42:21
Author Public Key
npub1k3qrkfq45qsvyp53hvvv2xk6tt9kfdca9asfvm9nc796dq65948q9q9t9mPublished at
2024-08-31 15:42:21Event JSON
{
"id": "056603dafce0e01a3348ecd441d43e418ed867597dd5c3f9e0d77930615c5395",
"pubkey": "b4403b2415a020c20691bb18c51ada5acb64b71d2f60966cb3c78ba683542d4e",
"created_at": 1725118941,
"kind": 1,
"tags": [],
"content": "Fake Palo Alto GlobalProtect used as lure to backdoor enterprises\nhttps://www.bleepingcomputer.com/news/security/fake-palo-alto-globalprotect-used-as-lure-to-backdoor-enterprises/\n\nThreat actors target Middle Eastern organizations with malware disguised as the legitimate Palo Alto GlobalProtect Tool that can steal data and execute remote PowerShell commands to infiltrate internal networks further.\n\noriginally posted at https://stacker.news/items/667914",
"sig": "aac69702eceecab43a27f029536834e4451e9b93d9ba5d68f4697fb7e3ce2fbd8491abc9749a86b60888a0e38a839d77af93a86d98714ebc675f7cde2ef4b393"
}