Earth Kitsune delivers new WhiskerSpy backdoor via watering hole attack

Trend Micro researchers discovered a new backdoor which Trend Micro have attributed to the advanced persistent threat actor known as Earth Kitsune, which they have covered before. Since 2019, Earth Kitsune has been distributing variants of self-developed backdoors to targets, primarily individuals who are interested in North Korea.

In many of the cases, Trend Micro have investigated in the past, the threat actor used watering hole tactics by compromising websites related to North Korea and injecting browser exploits into them. In the latest activity Trend Micro analyze here, Earth Kitsune used a similar tactic but instead of using browser exploits, employed social engineering instead.

Read more…
Source: Trend Micro