Sharp Dragon Hackers Attacking government entities Using Cobalt Strike & custom backdoors

An investigation revealed a critical vulnerability in JAVS Viewer v8.3.7, where the installer, downloaded from the official JAVS website, contained a backdoored version of ffmpeg.exe (associated with GateDoor/Rustdoor malware).  The malware executed encoded PowerShell scripts, potentially granting attackers full control of affected systems, while re-imaging and credential resets are recommended after installing the patched version … Continue reading Sharp Dragon Hackers Attacking government entities Using Cobalt Strike & custom backdoors