Researchers shared their discovery and research on espionage malware "The Mask" (aka Careto) at the Kaspersky Labs security summit this week. ZDNet took photos of the presentation.
PUNTA CANA, Dominican Republic -- Kaspersky’s security research team revealed "one of the most advanced" cyber-espionage malware threats “The Mask” (aka Careto) at the 2014 Security Analyst Summit this week.
ZDNet attended Kaspersky's presentaiton of "Behind the Mask" -- our photos of the presentation and its slides offer more details about the malware.
Slides of the presentation have not yet been published online.
IOC information has been included in Kaspersky's detailed technical research paper.
See: Washington Post, Guardian links used to infect The Mask malware victims
The malware's primary targets are government institutions, diplomatic offices and embassies, energy, oil and gas companies, research institutions, private equity firms and high-profile activists.
The researchers specifically named The Mask's phishing bait as "The Guardian" and "Washington Post" links sent in targeted emails.
The Mask collects a large list of documents from the infected system, including encryption keys, VPN configurations, SSH keys and RDP files.
There are also several unknown extensions being monitored that Kaspersky has not been able to identify and said "could be related to custom military/government-level encryption tools."
The researchers said, "At the moment, all known Careto command and control servers are offline. The campaign was active [from 2007] until January 2014, but during our investigations the C&C servers were shut down."
Kaspersky added that the malware's most active year for variants was 2012 in its official Mask FAQ, published after the presentation and announcements, at the end of conference day one.
Caption by: Violet Blue
Many of 2018's most dangerous Android and iOS security flaws still threaten your mobile security
Bypassing passcodes, malware-laden apps, and inherent design flaws exposing almost all known mobile devices made up part of the security problems found in iOS and Android. ...
Cybercrime and malware, 2019 predictions
Experts weigh in on what they believe will happen to the world of cybercrime, malware, and botnets in the coming year.
The best VPN services: Our 10 favorite vendors for protecting your privacy
Whether you're in the office or on the road, a VPN is still one of the best ways to protect yourself on the big, bad internet. One of these could be your best bet. ...
Apricorn Aegis Fortress L3 portable storage drive
If you're looking for a fast, ultra-rugged, secure encrypted portable storage drive that's available in both HDD and SSD flavors, look no further than Apricorn's new Aegis Fortress ...
How to secure your iPhone from hackers, snoopers, and thieves (iOS 12.1)
Your iPhone and iPad is likely packed with important, valuable, and even sensitive information that you might not want others to be able to access. Here are the steps you should take ...
Top tips to keep safe around your voice assistant
Voice assistants like Google Home, Amazon Alexa, and Samsung smart TVs are always listening, yet consumers are unaware that their recordings are held online. Here are some ways to ...
These are the worst hacks, cyberattacks, and data breaches of 2018
Millions of records were lost, services were disrupted, and credit card data was stolen as hackers ran amok over the year.
Join Discussion