TA410 under the microscope – Week in security with Tony Anscombe

Cyber Security

Here’s what you should know about FlowingFrog, LookingFrog and JollyFrog – the three teams making up the TA410 espionage umbrella group

In this edition of Week in security, Tony looks at the latest ESET research that:

  • provided a detailed overview of TA410, a cyberespionage umbrella group that targets entities in the government and education sectors all around the world
  • revealed that TA 410 is made up of three teams – FlowingFrog, LookingFrog, and JollyFrog, each with its own toolset and targets and
  • discovered a new version of FlowCloud, a complex and modular remote access tool that has several interesting capabilities and is used by FlowingFrog

For example, FlowCloud can:

  • collect mouse movements, keyboard activity and clipboard content along with information about the current foreground window and
  • gather information about things happening around the victim’s computer by taking pictures using connected camera peripherals and recording audio using a computer’s microphone.

Read the blogpost to learn more about the group, its targets, and the methods of compromise that the group’s three teams use.

Products You May Like

Articles You May Like

‘eXotic Visit’ Spyware Campaign Targets Android Users in India and Pakistan
Google Chrome Adds V8 Sandbox – A New Defense Against Browser Attacks
US Federal Data Privacy Law Introduced by Legislators
Hackers Use Malware to Hunt Software Vulnerabilities
Rhadamanthys Malware Deployed By TA547 Against German Targets

Leave a Reply

Your email address will not be published. Required fields are marked *