Jewelbug: APT Group Runs Espionage and Crypto Fraud Operations Side by Side
By About the Author
Excerpt
Key findings
Jewelbug is a China-based hackers-for-hire group that runs parallel operations: espionage against governments and militaries across the Middle East, Southeast Asia and South Asia, and a for-profit cryptocurrency fraud business.
Both missions are administered from a single control panel, XG-Web, a browser-centric remote-access and information-stealing framework that turns a victim’s browser into a full remote-control channel and reaches from there into the host and the internal network behind it.
At least one of the operators is tied to a registered Hunan company…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by Symantec on security.com.
Mentioned in the excerpt
More from Symantec4
- Warlock Ransomware Attackers Hit Water and Telecom OperatorsSymantec · Added 6 Oct
- GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable DefensesSymantec · Added 28 Jul
- Fast16: Pre-Stuxnet Sabotage Tool Was Built to Subvert Nuclear Weapons SimulationsSymantec · Added 23 Jul
- Daxin Returns: Stealthy Malware Resurfaces in Taiwan Alongside a New BackdoorSymantec · Added 17 Jul
On the same topics
- Retrohunting APT37: North Korean APT used VBA self decode technique to inject RokRatMalwarebytes · Published 5 Jan 2021
- Kazuar (Malware Family)Malpedia · Added 18 Oct
- Chinese Nation-State Hackers Target U.S in Operation TradeSecret, Report Claimseweek.com · Published 6 Apr 2017
- Taiwan High-Tech Ecosystem Targeted by Foreign APT Group:Medium · Published 10 Jun 2022
