
image credit: unsplash
Researchers warn of a sophisticated cybercriminal group that has been stealing millions of dollars from finance and commerce organizations over the past year by breaking into networks via legacy Java applications and then laying low to learn internal financial processes. The group, which researchers from incident response firm Sygnia have dubbed Elephant Beetle, uses a large collection of custom and open-source tools in its operations, including Java backdoors, and is good at blending in with the target’s environment and network traffic flows to remain undetected for months.