Praying Mantis Threat Actor Targeting Windows Internet Facing Servers With Malware
The report said that the advanced and persistent threat actor – which they have named “Praying Mantis” or “TG1021” – mostly used deserialization attacks to load a completely volatile, custom malware platform tailored for the Windows IIS environment. “TG1021 uses a custom-made malware framework, built around a common core, tailor-made for IIS servers. The toolset is completely volatile, reflectively loaded into an affected machine’s memory and leaves little-to-no trace on infected targets,” the researchers wrote....