![](data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48"><rect fill-opacity="0"/></svg>)
#ESETResearch discovered that #LuckyMouse/#APT27 used a code-signing certificate belonging to VMPsoft, the developer of the VMProtect packer. The signed file is a loader for the SysUpdate backdoor (aka Soldier). We notified VMPSoft of this compromise 1/4
virustotal.com/gui/file/a8527
ツイートを翻訳
![画像](data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" width="638" height="377"><rect fill-opacity="0"/></svg>)
![](data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24"><rect fill-opacity="0"/></svg>)
![画像](data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" width="360" height="189"><rect fill-opacity="0"/></svg>)
![画像](data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" width="265" height="360"><rect fill-opacity="0"/></svg>)
![画像](data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" width="360" height="175"><rect fill-opacity="0"/></svg>)
![画像](data:image/svg+xml,<svg xmlns="http://www.w3.org/2000/svg" width="680" height="195"><rect fill-opacity="0"/></svg>)