TLDR InfoSec · MISCELLANEOUS

SOPHISTICATED STRIPEDFLY SPY PLATFORM MASQUERADED FOR YEARS AS CRYPTO MINER

zetter-zeroday.com8 min read

Summary from the TLDR InfoSec newsletter

The StripedFly malware was first discovered by Kaspersky researchers in 2017 and was initially believed to be a cryptocurrency miner. Researchers discovered that the miner was actually a cover for a highly sophisticated spy platform. The malware uses a custom TOR client to transmit communication and siphoned data between infected systems and the attackers' command and control server and has a ransomware component that has infected a small subset of victims.