Operation TunnelSnake - Uncovered Moriya Rootkit Targeting Diplomatic Organizations in Asia and Africa
released on 2021-05-07 @ 06:32:08 PM
In this blog post Kaspersky focuses on key findings from an investigation that uncovered a formerly unknown Windows rootkit, dubbed Moriya, and its underlying cluster of activity. Kaspersky observed the Moriya rootkit and other tools by the threat actor behind it being used as part of a campaign dubbed ‘TunnelSnake’, conducted against several prominent organizations in Asia and Africa.