business π¦ New cyber attack targets South Asia infra
A sophisticated espionage operation has surfaced, targeting telecom providers and critical South Asian infrastructure using custom implants. The attack chain involved initial delivery via a malicious Inno Setup package disguised as legitimate software from Afghan Telecom. This malware established persistence by hijacking browser shortcuts and registered victims to the C2 domain appstoore[.]solutions. Operators can remotely execute commands and manage webshells via SuperShell v2.0.0 on the staging infrastructure. This activity shows diversification across multiple implant types, including SHEETCORD and HACKERAI C2 Agent. π΅οΈ