DeathStalker attacks German users
APT actor DeathStalker attacks users in Germany and Switzerland. Target of the actor: companies in the financial and legal sector. New backdoor “PowerPepper” uses various obfuscation techniques. Advanced persistent threat (APT) actor DeathStalker is now believed to be offering hacking-for-hire services to steal confidential business information from companies in the financial and legal sectors. Kaspersky experts have now spotted new activity from the actor and discovered a new malware implantation and delivery tactic: the PowerPepper backdoor uses DNS over HTTPS as a communication channel to hide the communication behind legitimate control server name queries. In addition, PowerPepper uses various obfuscation techniques such as steganography. Especially SMEs in…