DNSpionage actors adjust tactics, debut new remote administration tool

CERT-LatestNews Malware ThreatsCybercrime ThreatsEconomic ThreatsStrategic

The actors responsible for the DNSpionage DNS hijacking campaign have altered some of their tactics, techniques and procedures (TTPs), introducing a new reconnaissance phase as well as a new malicious remote administration tool called Karkoff. Discovered last November, the operation primarily targets Lebanon- and United Arab Emirates-affiliated .