An incident response reveals itself as GhostShell tool, ShellClient. [Research Saturday]
CyberWire Daily
00:00
Is This a New Thread Actor?
The target of that thread actor is a telcos in airspace companies. The ones that we were able to identify were companies in the middle east, in russia, inna and in us. So it's a very specific set of companies and in very fic set of countries. Do you have any sense for who might be behind this? Yes. If we cannot find a good correlation on those four factors, this is probably a new thread actor.
Play episode from 11:52
Transcript
