Malware
malware:spark
Also: Spark backdoor
Backdoor discovered in February 2020 that provided attackers access to victim endpoints and supported espionage activity.
Backdoor discovered in February 2020 that provided attackers access to victim endpoints and supported espionage activity.
“that’s where we – when we discovered the Spark backdoor”
“they called Spark”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| outgoing | ATTRIBUTED_TO | Molerats | Uncertain | 89 |
| outgoing | USES | Data exfiltration | Explicit | 89 |
Assaf assesses with moderate to high confidence that Molerats was likely behind the campaign in which Spark was discovered; attribution is hedged.
Uncertain Confidence 82% · Assaf Dahan EP 89 Details
“you can say that with, I don’t know, moderate to high confidence that it’s likely Molerats who is behind it.”
Spark USES Data exfiltration
Spark can be used to steal and harvest information from a victim endpoint.
Explicit Confidence 96% · Assaf Dahan EP 89 Details
“They can run different commands, they can use it to steal information”
“basically harvest any information.”