Apr 14, 09:05 PM

Microsoft Teams Phishing Campaign Spreads PowerShell Backdoor; ResolverRAT Targets Healthcare and Crypto Wallets Including ETH, XRP, SOL

A recent cybersecurity report has highlighted a phishing campaign using Microsoft Teams to distribute a PowerShell backdoor, a technique reminiscent of Black Basta ransomware attacks. The report, issued by ReliaQuest, indicates that this campaign is part of a broader trend of sophisticated cyber threats. Additionally, a new malware known as ResolverRAT is targeting the healthcare and pharmaceutical sectors through phishing and stealth tactics. This malware employs advanced evasion techniques, including encryption and IP rotation, and utilizes localized lures in languages such as Hindi, Italian, and Turkish. Cybersecurity researchers also reported a separate campaign involving malicious npm packages that target popular cryptocurrency wallets, including Atomic and Exodus, to steal funds from users' wallets, specifically targeting Ethereum (ETH), Ripple (XRP), and Solana (SOL). The attacks are characterized by their stealthy approach, allowing cybercriminals to drain crypto assets without user interaction.

#Microsoft Teams #PowerShell #Black Basta #ReliaQuest #Hindi #Italian #Turkish #Atomic #Exodus #Ethereum #ETH #Ripple #XRP #Solana #SOL

Written with ChatGPT (GPT-4o mini).

Sources

Additional media

Image #1 for story microsoft-teams-phishing-campaign-spreads-powershell-backdoor-resolverrat-crypto-0f66079d

Image #2 for story microsoft-teams-phishing-campaign-spreads-powershell-backdoor-resolverrat-crypto-0f66079d

Image #3 for story microsoft-teams-phishing-campaign-spreads-powershell-backdoor-resolverrat-crypto-0f66079d

Microsoft Teams Phishing Campaign Spreads PowerShell Backdoor; ResolverRAT Targets Healthcare and Crypto Wallets Including ETH, XRP, SOL

Sources

Additional media

Similar Stories