3 ms·
yawns Good morning world, Here's the updated Antimiasma tool for mitigation [1] [2]. More details on how this tool was built and how the Miasma worm works on m
by cookiengineer 2mo ago
yawns Good morning world,
Here's the updated Antimiasma tool for mitigation [1] [2]. More details on how this tool was built and how the Miasma worm works on my website [3].
This is the first false flag in the campaign series, where setting the "LANG" environment variable to "ru_RU.UTF-8" or "ru_RU.KOI8-R" won't stop the spreading mechanism.
So it's likely this could've been any script kiddie that modified the TeamPCP source code dump. It could now also be still APT28/29, that was kind of the purpose of the code dump... to gain plausible deniability :)
Anyways, stay safe folks.
[1] https://github.com/cookiengineer/antimiasma https://github.com/cookiengineer/antimiasma
[2] https://github.com/cookiengineer/antimiasma/releases/tag/miasma-here-we-go-again https://github.com/cookiengineer/antimiasma/releases/tag/mia...
[3] https://cookie.engineer/projects/cyber-defense/antimiasma.html https://cookie.engineer/projects/cyber-defense/antimiasma.ht...