VERY IMPORTANT

Tracking Subaat: Targeted Phishing Attacks Point Leader to Threat Actor’s Repository Unit 42 By Unit 42 October 27, 2017 at 5:00 AM Category: Unit 42 Tags: CVE-2012-0158, Downloader, QuasarRAT, Subaat 157 (0) In mid-July, Palo Alto Networks Unit 42 identified a small targeted phishing campaign aimed at a government organization. While tracking the activities of this campaign, we identified a repository of additional malware, including a web server that was used to host the payloads used for both this attack as well as others. We’ll discuss how we discovered it, as well as possible attribution towards the individual behind these attacks.