Our initial findings are outlined here, and a description of additional modules used by the framework is here. Talos has been researching VPNFilter for months. And while we believe our work, and the work of our international coalition of partners, has mostly neutralized the threat from VPNFilter, it can still be difficult to detect in the wild if any devices remain unpatched. The new functions also include data filtering and multiple encrypted tunneling capabilities to mask command and control (C2) and data exfiltration traffic. Cisco Talos recently discovered seven additional third-stage VPNFilter modules that add significant functionality to the malware, including an expanded ability to exploit endpoint devices from footholds on compromised network devices. VPNFilter - a multi-stage, modular framework that has infected hundreds of thousands of network devices across the globe - is now known to possess even greater capabilities.
0 kommentar(er)
