TA410 under the microscope – Week in security with Tony Anscombe

Cyber Security

Here’s what you should know about FlowingFrog, LookingFrog and JollyFrog – the three teams making up the TA410 espionage umbrella group

In this edition of Week in security, Tony looks at the latest ESET research that:

  • provided a detailed overview of TA410, a cyberespionage umbrella group that targets entities in the government and education sectors all around the world
  • revealed that TA 410 is made up of three teams – FlowingFrog, LookingFrog, and JollyFrog, each with its own toolset and targets and
  • discovered a new version of FlowCloud, a complex and modular remote access tool that has several interesting capabilities and is used by FlowingFrog

For example, FlowCloud can:

  • collect mouse movements, keyboard activity and clipboard content along with information about the current foreground window and
  • gather information about things happening around the victim’s computer by taking pictures using connected camera peripherals and recording audio using a computer’s microphone.

Read the blogpost to learn more about the group, its targets, and the methods of compromise that the group’s three teams use.

Products You May Like

Articles You May Like

Cybercriminals Exploit CrowdStrike Update Mishap to Distribute Remcos RAT Malware
CrowdStrike Fault Causes Global IT Outages
Alert: HotPage Adware Disguised as Ad Blocker Installs Malicious Kernel Driver
The complexities of cybersecurity update processes
SAP AI Core Flaws Expose Sensitive Customer Data and Keys

Leave a Reply

Your email address will not be published. Required fields are marked *