A Report on Targeted Attacks and Techniques Used by Malware

This chapter focuses on a report by Sentinel Labs that discusses malware specifically designed to target telcos in Europe, North Africa, and the Middle East. The malware utilizes Lua just in time compiler and the Lua virtual machine to evade detection techniques, and also exploits vulnerable authentication methods commonly targeted by ransomware gangs. The chapter also highlights the uncommon use of Quick and HTTP2 in the command and control channel.