A threat actor is using polyglot files to conceal installation of a new backdoor as part of a spear-phishing campaign targeting firms in the United Arab Emirates (UAE), particularly in the aviation, satellite communications, and transportation sectors. The backdoor has been dubbed Sosano by researchers at Proofpoint, who made the discovery with help from PwC’s…
IT & Security News for Geeks