Ancient ICEFOG APT malware spotted again in new wave of attacks


Malware developed by Chinese state-sponsored hackers that was once thought to have disappeared has been recently spotted in new attacks, in an updated and more dangerous form.

Spotted by FireEye senior researcher Chi-en (Ashley) Shen, the malware is named ICEFOG (also known as Fucobha).

It was initially used by a Chinese APT (advanced persistent threat, a technical term for state-sponsored hacking units), also named ICEFOG, whose operations were first detailed in a Kaspersky report in September 2013.

Following the publication of that report, the ICEFOG group’s activities stopped, and so have sightings of its eponymously named malware.

Read more…
Source: ZDNet