Podcast Episode Details

Back to Podcast Episodes

Podcast bait, malware switch. [Research Saturday]


Season 8 Episode 349


Joshua Miller from Proofpoint is discussing their work on "Best Laid Plans: TA453 Targets Religious Figure with Fake Podcast Invite Delivering New BlackSmith Malware Toolset." Proofpoint identified Iranian threat actor TA453 targeting a prominent Jewish figure with a fake podcast interview invitation, using a benign email to build trust before sending a malicious link.

The attack attempted to deliver new malware called BlackSmith, containing a PowerShell trojan dubbed AnvilEcho, designed for intelligence gathering and exfiltration. This malware consolidates all of TA453's known capabilities into a single script rather than the previously used modular approach.

The research can be found here:

Learn more about your ad choices. Visit megaphone.fm/adchoices


Published on 1 year, 2 months ago






If you like Podbriefly.com, please consider donating to support the ongoing development.

Donate