As cited
Copy frozen at (site build).
threat intel
Elastic Security Labs uncovers BRUSHWORM and BRUSHLOGGER
Elastic Security Labs identified two custom malware tools deployed against a South Asian financial institution: BRUSHWORM, a modular backdoor capable of spreading via USB, and BRUSHLOGGER, a DLL-side-loaded keylogger. The discovery reveals a targeted intrusion leveraging both network and removable media propagation channels.
Why it matters: Financial institutions and their security teams should assess exposure to USB-based malware delivery and side-loading attacks, and review endpoint detection rules for these custom tools and techniques.
- Source published
- First seen by Cybersecurity Tracker