As cited
Copy frozen at (site build).
threat intel
SiestaGraph: New implant uncovered in ASEAN member foreign ministry
Elastic Security Labs identified a new implant called SiestaGraph deployed against a foreign ministry in an ASEAN member nation. The attack chain combined Microsoft Exchange exploits, web shells, and the SiestaGraph implant to establish persistence, escalate privileges, and steal data. Multiple threat actors are believed to be leveraging this toolset.
Why it matters: Government and diplomatic organizations worldwide are targeted; practitioners should review Exchange access logs and hunt for SiestaGraph indicators of compromise (IOCs) to detect similar intrusions.
- Source published
- First seen by Cybersecurity Tracker