Turla APT Hackers Using New Malware to Break The TLS Encrypted Web Traffic Communication

From gbhackers.com

Turla APT Hackers Using New Malware to Break The TLS Encrypted Web Traffic Communication

Turla APT threat actors distribute a new malware called Reductor, a successor of COMpfun to compromise the TLS encrypted web traffic and infect the targeted network.

Reductor malware has exclusive RAT functionality with the ability to such as uploading, downloading, and executing files on victims’ networks by manipulating digital certificates.

Researchers believe that the malware has strong code similarities between this family and the COMPfun malware and is linked with Turla APT.

Read more…