Titanium APT uses fileless technique to inject new hidden backdoor on Windows
By MYBRANDBOOK
A new wave of malware attack from the Titanium APT group have struck to infect Windows with hidden backdoor by mimicking common legitimate software and file less technique. Additionally, the malware file system cannot be detected as malicious due to the use of encryption and fileless technologies to infect the victims.
Titanium APT is one of the technologically advanced hacking groups; they are using the various sophisticated techniques to attack the target, and their method of attack makes very hard to detect their activities in wide. They mainly target the APAC region, and the current attack is believed to be focused on South and Southeast Asia.
Before installing a backdoor on a windows computer in the final stage, threat actors follow complex sequences of dropping, downloading, and installing stages. During this process, in every stage, they mimic a known software, such as security software, software for making DVD videos, sound drivers’ software, to evade detection.
The shellcode itself contains position-independent code connected to the hardcoded C&C address, download an encrypted payload, then decrypt and launch it using a hardcoded unpacking password.
Titanium Threat actors always have a habit to use Wrapper DLLs to decrypt and load an encrypted file on the system memory.
At the final stage of installing a backdoor, attackers use the Trojan-Backdoor installer that launches from the command line using a password to unpack it. Installer receives a command from the C2 server by sending an empty request to the C2 server, and the malware can also get proxy settings from Internet Explorer. In response, C2 Server sends a PNG file that contains steganographically hidden data. This data is encrypted with the same key as the C&C requests. The decrypted data contains backdoor commands to steal the data from infected victims.
BREAKING NEWS
TECHNO TRENDS
Nazara and ONDC set to transform in-game monetization with ‘
Nazara Technologies has teamed up with the Open Network for Digital Comme...
Jio Platforms and NICSI to offer cloud services to government
In a collaborative initiative, the National Informatics Centre Services In...
BSNL awards ₹5,000 Cr Project to RVNL-Led Consortium
A syndicate led by Rail Vikas Nigam Limited (abbreviated as RVNL), along wi...
Pinterest tracks users without consent, alleges complaint
A recent complaint alleges that Pinterest, the popular image-sharing platf...
E-Magazine
TECHNOTAINMENT
Netflix adds 'Moments' feature for saving, sharing scenes from
Netflix has introduced a new “Moments” feature on its mobile app, whic
Jacqueline Fernandez come together with YouTuber Mr. Beast for
Jacqueline Fernandez has partnered with American YouTuber Mr. Beast to b
MOVERS & SHAKERS
Visa elevates Rishi Chhabra as new Country Manager for India
Rishi holds a Master’s in Industrial Engineering from The Ohio State Univ
Genesys welcomes Albert Nel as Senior VP and Regional Sales Le
Genesys continues to deepen its investment in the APAC region. Earlier this
OPEN YOUR EYES
INTERVIEWS
Alpha Max offers high end solutions in the network space to en
The vision at Alpha Max is to attain quality as the trademark and create a
Bolstering its commitment to help build a truly self-reliant B
CP PLUS is dedicated to spreading a sense of security to every corner of In
HOT PICK
SonicWall Launches TZ80: A Powerful Solution for Remote Office
SonicWall announced today the launch of the TZ80, a groundbreaking securit
Gigabyte X3D Turbo: A Gaming Revolution
GIGABYTE X3D Turbo Mode is a cutting-edge feature that unifies cores distr
MAKE IN INDIA BRANDS
SAMSUNG INDIA ELECTRONICS LTD.
PDRL - Passenger Drone Research Pvt. Ltd.
FRESHWORKS TECHNOLOGIES PVT. LTD.
SAFE SECURITY SERVICES PVT. LTD.
EMINENT CIO'S OF INDIA
ICONS OF INDIA
Icons Of India : Dr. Sanjay Bahl
Dr. Sanjay Bahl has around four decades of experience in the ICT indus...
ICONS OF INDIA : RAJIV MEMANI
As Chair of the EY Global Emerging Markets Committee, Rajiv connects e...
Icons Of India : Arjun Malhotra
Arjun Malhotra, the Chairman of Magic Software Inc., is widely recogni...
PARTNER SPEAKERS
PSU
C-DOT - Center of Development of Telematics
India’s premier research and development center focused on telecommu...
UIDAI - Unique Identification Authority of India
UIDAI and the Aadhaar system represent a significant milestone in Indi...
PFC - Power Finance Corporation Ltd
PFC is a leading financial institution in India specializing in power ...
VIDEOS
Top 25 Brands
Global Indian industry
Indian Tech Talent Excelling The Tech World - Aman Bhutani, CEO, GoDaddy
Aman Bhutani, the self-taught techie and CEO of GoDaddy, oversees a co...
Indian Tech Talent Excelling The Tech World - Satya Nadella, Chairman & CEO- Microsoft
Satya Nadella, the Chairman and CEO of Microsoft, recently emphasized ...
Indian Tech Talent Excelling The Tech World - Shantanu Narayen, CEO- Adobe Systems Incorporated
Shantanu Narayen, CEO of Adobe Systems Incorporated, is renowned for h...
STARNITE AWARDS 2024
ITFORUM 2024
CMO of the Year
WOMEN LEADERSHIP
IMAGE GALLERY
TRENDS IN TECHNOLOGY
MORE VIDEOS
ADVERTISEMENTS
TECHNOLOGY DISRUPTION
UNICORNS REVOLUTIONISING
