Punishing Owl attacks Russia

Punishing Owl attacks Russia🦉
A new owl in the hacktivist forest

🎄 On the eve of the New Year, a number of Russian institutions received an unpleasant gift — a cyber incident in corporate networks with a public leak of internal information.

🕵🏽‍♂️ The cyber intelligence team of the PT ESC TI department managed to discover that the attacks are being carried out by a previously unknown politically motivated group Punishing Owl.

🫆 The group has made its mark with:

• use of an AI-generated custom stealer called ZipWhisper;
• manipulation of victims’ DNS records;
• BEC attacks on counterparties;
• its own DLS resources and darknet accounts.

📋 More details — in our article on Habr.

#TI #APT
@ptescalator