Netskope has identified a new backdoor threat built in Golang that uses Telegram as its command-and-control (C2) infrastructure, allowing it to receive and execute commands. The malware is capable of executing PowerShell commands, self-destructing, and verifying the validity of received commands before action. While the use of cloud apps like Telegram as C2 servers is not uncommon, it poses a challenge for security professionals to differentiate between malicious and benign activities, with this particular backdoor believed to be of Russian origin.
Full Article
Coinbase Says S.E.C. Will Drop Crypto Lawsuit
The cryptocurrency exchange Coinbase announced that the Securities and Exchange Commission has agreed to drop its lawsuit against the company, signaling a retreat by federal regulators and lifting a legal cloud over the global crypto industry. The S.E.C. sued Coinbase in 2023 for selling unregistered securities, but a settlement agreement has been reached without financial penalty, pending S.E.C. approval, marking a significant victory for the industry after years of legal battles and potential regulatory threats....
Read more