Donot Team Leverages New Modular Malware Framework in South Asia
released on 2018-03-09 @ 06:49:07 PM
In late January 2018, ASERT discovered a new modular malware framework we call “yty”. The framework shares a striking resemblance to the EHDevel framework. We believe with medium confidence that a team we call internally as “Donot Team” is responsible for the new malware and will resume targeting of South Asia.