TLDR InfoSec · MISCELLANEOUS
SOPHISTICATED STRIPEDFLY SPY PLATFORM MASQUERADED FOR YEARS AS CRYPTO MINER
Summary from the TLDR InfoSec newsletter
The StripedFly malware was first discovered by Kaspersky researchers in 2017 and was initially believed to be a cryptocurrency miner. Researchers discovered that the miner was actually a cover for a highly sophisticated spy platform. The malware uses a custom TOR client to transmit communication and siphoned data between infected systems and the attackers' command and control server and has a ransomware component that has infected a small subset of victims.