dubbed Slingshot<\/a>\u00a0by researchers at Kaspersky Lab and showcased at the firm\u2019s Security Analyst Summit, resides in Mikrotik routers \u2013 presumably on the principle that the only people who access the devices are an organization\u2019s IT team. It\u2019s not known how the malware gets onto the router, but it contains a malicious dynamic link library that\u2019s capable of pulling in all kinds of nasty attack tools.<\/p>\n\u201cNever seen this attack vector before, first hack the router and then go for sysadmin,\u201d said Costin Raiu, Kaspersky\u2019s director of global research and analysis. \u201cWe\u2019ve seen a lot of attacks against sysadmins but sometimes it\u2019s tricky to find them. This is a very good way to hack the sysadmin and get the keys to the kingdom \u2013 it\u2019s a completely new strategy.\u201d<\/p>\n
The malware was discovered by accident. The team was analyzing a piece of keylogging code and decided to scan to see if it could be found elsewhere. The malware\u2019s signature turned up in a seemingly innocent file on another computer labelled\u00a0scesrv.dll<\/code>.<\/p>\nIn testing, once a computer links into the router\u2019s configuration system, the malware activates and dumps a copy of itself onto the connecting PC and gains root access. It then downloads new modules, including two powerful pieces of code dubbed Cahnadr and GollumApp which can harvest screenshots, keyboard data, network data, passwords, USB connections, other desktop activity, and clipboard data.<\/p>\n
What does that mean for Thai Based IT Companies, well we think the door is still way to wide open here and getting a good IT Consultant \/ Trusted Advisor would be our recommendation. We still see lots of PCs running windows XP and no updates or free antivirus solutions.<\/p>\n
Thank you to the register for the heads up about this article.<\/p>\n","protected":false},"excerpt":{"rendered":"
The best way to get the keys to the kingdom is to get t […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[91],"tags":[],"class_list":["post-2544","post","type-post","status-publish","format-standard","hentry","category-uncategorized-th"],"yoast_head":"\n
Slingshot Malware targets Sysadmins - humanit managed services<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/old.humanit.asia\/slingshot-malware-targets-sysadmins\/\" \/>\n<meta property=\"og:locale\" content=\"th_TH\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Slingshot Malware targets Sysadmins - humanit managed services\" \/>\n<meta property=\"og:description\" content=\"The best way to get the keys to the kingdom is to get t […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/old.humanit.asia\/slingshot-malware-targets-sysadmins\/\" \/>\n<meta property=\"og:site_name\" content=\"humanit managed services\" \/>\n<meta property=\"article:published_time\" content=\"2018-03-12T00:10:11+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2019-07-22T08:04:00+00:00\" \/>\n<meta name=\"author\" content=\"Admin\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 \u0e19\u0e32\u0e17\u0e35\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/old.humanit.asia\\\/slingshot-malware-targets-sysadmins\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/old.humanit.asia\\\/th\\\/slingshot-malware-targets-sysadmins\\\/\"},\"author\":{\"name\":\"Admin\",\"@id\":\"https:\\\/\\\/old.old.humanit.asia\\\/#\\\/schema\\\/person\\\/e7a3d665ee9cc6526fb6fdc92f4eb09c\"},\"headline\":\"Slingshot Malware targets Sysadmins\",\"datePublished\":\"2018-03-12T00:10:11+00:00\",\"dateModified\":\"2019-07-22T08:04:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/old.humanit.asia\\\/th\\\/slingshot-malware-targets-sysadmins\\\/\"},\"wordCount\":322,\"articleSection\":[\"Uncategorized @th\"],\"inLanguage\":\"th\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/old.humanit.asia\\\/th\\\/slingshot-malware-targets-sysadmins\\\/\",\"url\":\"https:\\\/\\\/old.humanit.asia\\\/slingshot-malware-targets-sysadmins\\\/\",\"name\":\"Slingshot Malware targets Sysadmins - humanit managed services\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/old.old.humanit.asia\\\/#website\"},\"datePublished\":\"2018-03-12T00:10:11+00:00\",\"dateModified\":\"2019-07-22T08:04:00+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/old.old.humanit.asia\\\/#\\\/schema\\\/person\\\/e7a3d665ee9cc6526fb6fdc92f4eb09c\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/old.humanit.asia\\\/slingshot-malware-targets-sysadmins\\\/#breadcrumb\"},\"inLanguage\":\"th\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/old.humanit.asia\\\/slingshot-malware-targets-sysadmins\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/old.humanit.asia\\\/slingshot-malware-targets-sysadmins\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/old.humanit.asia\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Slingshot Malware targets Sysadmins\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/old.old.humanit.asia\\\/#website\",\"url\":\"https:\\\/\\\/old.old.humanit.asia\\\/\",\"name\":\"humanit managed services\",\"description\":\"making technology easy\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/old.old.humanit.asia\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"th\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/old.old.humanit.asia\\\/#\\\/schema\\\/person\\\/e7a3d665ee9cc6526fb6fdc92f4eb09c\",\"name\":\"Admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"th\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d8f90c345033af4c0eb51ef25202eced8799a4331f9c232149e984d2570105b?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d8f90c345033af4c0eb51ef25202eced8799a4331f9c232149e984d2570105b?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/2d8f90c345033af4c0eb51ef25202eced8799a4331f9c232149e984d2570105b?s=96&d=mm&r=g\",\"caption\":\"Admin\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Slingshot Malware targets Sysadmins - humanit managed services","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/old.humanit.asia\/slingshot-malware-targets-sysadmins\/","og_locale":"th_TH","og_type":"article","og_title":"Slingshot Malware targets Sysadmins - humanit managed services","og_description":"The best way to get the keys to the kingdom is to get t […]","og_url":"https:\/\/old.humanit.asia\/slingshot-malware-targets-sysadmins\/","og_site_name":"humanit managed services","article_published_time":"2018-03-12T00:10:11+00:00","article_modified_time":"2019-07-22T08:04:00+00:00","author":"Admin","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Admin","Est. reading time":"2 \u0e19\u0e32\u0e17\u0e35"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/old.humanit.asia\/slingshot-malware-targets-sysadmins\/#article","isPartOf":{"@id":"https:\/\/old.humanit.asia\/th\/slingshot-malware-targets-sysadmins\/"},"author":{"name":"Admin","@id":"https:\/\/old.old.humanit.asia\/#\/schema\/person\/e7a3d665ee9cc6526fb6fdc92f4eb09c"},"headline":"Slingshot Malware targets Sysadmins","datePublished":"2018-03-12T00:10:11+00:00","dateModified":"2019-07-22T08:04:00+00:00","mainEntityOfPage":{"@id":"https:\/\/old.humanit.asia\/th\/slingshot-malware-targets-sysadmins\/"},"wordCount":322,"articleSection":["Uncategorized @th"],"inLanguage":"th"},{"@type":"WebPage","@id":"https:\/\/old.humanit.asia\/th\/slingshot-malware-targets-sysadmins\/","url":"https:\/\/old.humanit.asia\/slingshot-malware-targets-sysadmins\/","name":"Slingshot Malware targets Sysadmins - humanit managed services","isPartOf":{"@id":"https:\/\/old.old.humanit.asia\/#website"},"datePublished":"2018-03-12T00:10:11+00:00","dateModified":"2019-07-22T08:04:00+00:00","author":{"@id":"https:\/\/old.old.humanit.asia\/#\/schema\/person\/e7a3d665ee9cc6526fb6fdc92f4eb09c"},"breadcrumb":{"@id":"https:\/\/old.humanit.asia\/slingshot-malware-targets-sysadmins\/#breadcrumb"},"inLanguage":"th","potentialAction":[{"@type":"ReadAction","target":["https:\/\/old.humanit.asia\/slingshot-malware-targets-sysadmins\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/old.humanit.asia\/slingshot-malware-targets-sysadmins\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/old.humanit.asia\/"},{"@type":"ListItem","position":2,"name":"Slingshot Malware targets Sysadmins"}]},{"@type":"WebSite","@id":"https:\/\/old.old.humanit.asia\/#website","url":"https:\/\/old.old.humanit.asia\/","name":"humanit managed services","description":"making technology easy","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/old.old.humanit.asia\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"th"},{"@type":"Person","@id":"https:\/\/old.old.humanit.asia\/#\/schema\/person\/e7a3d665ee9cc6526fb6fdc92f4eb09c","name":"Admin","image":{"@type":"ImageObject","inLanguage":"th","@id":"https:\/\/secure.gravatar.com\/avatar\/2d8f90c345033af4c0eb51ef25202eced8799a4331f9c232149e984d2570105b?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/2d8f90c345033af4c0eb51ef25202eced8799a4331f9c232149e984d2570105b?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/2d8f90c345033af4c0eb51ef25202eced8799a4331f9c232149e984d2570105b?s=96&d=mm&r=g","caption":"Admin"}}]}},"_links":{"self":[{"href":"https:\/\/old.humanit.asia\/th\/wp-json\/wp\/v2\/posts\/2544","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/old.humanit.asia\/th\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/old.humanit.asia\/th\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/old.humanit.asia\/th\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/old.humanit.asia\/th\/wp-json\/wp\/v2\/comments?post=2544"}],"version-history":[{"count":2,"href":"https:\/\/old.humanit.asia\/th\/wp-json\/wp\/v2\/posts\/2544\/revisions"}],"predecessor-version":[{"id":2869,"href":"https:\/\/old.humanit.asia\/th\/wp-json\/wp\/v2\/posts\/2544\/revisions\/2869"}],"wp:attachment":[{"href":"https:\/\/old.humanit.asia\/th\/wp-json\/wp\/v2\/media?parent=2544"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/old.humanit.asia\/th\/wp-json\/wp\/v2\/categories?post=2544"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/old.humanit.asia\/th\/wp-json\/wp\/v2\/tags?post=2544"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}