“Operation Sharpshooter uses a new implant to target mainly English-speaking nuclear, defense, energy and financial companies. Researchers have detected a widespread reconnaissance campaign using a never-before-seen implant framework to infiltrate global defense and critical infrastructure players — including nuclear, defense, energy and financial companies. The campaign, dubbed Operation Sharpshooter, began Oct. 25 when a splay of malicious documents were sent via Dropbox. The campaign’s implant has since appeared in 87 organizations worldwide, predominantly (about 50 percent of attacks) in the U.S. and in other English-speaking companies. ‘Our discovery of a new, high-function implant is another example of how targeted attacks attempt to gain intelligence,’ said Ryan Sherstobitoff and Asheer Malhotrawith of McAfee, in a Wednesday analysis. The documents, which contained English-language job descriptions for positions ‘at unknown companies,’ were loaded with Korean-language metadata – indicating that they were created with a Korean version of Microsoft Word.”
About OODA Analyst
OODA is comprised of a unique team of international experts capable of providing advanced intelligence and analysis, strategy and planning support, risk and threat management, training, decision support, crisis response, and security services to global corporations and governments.