New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure
Afghan telecom providers and South Asian critical infrastructure organizations are the targets of a new campaign delivering a previously undocumented backdoor called…
Tag: SHEETCORD
SHEETCORD: Go-Based Backdoor Uses Google Sheets for C2
SHEETCORD is a Go-based backdoor that uses Google Sheets API for command-and-control. It is delivered via a fake NIC website and combines…
Google Sheets Used as C2 Channel by SHEETCORD
Google Sheets is abused by SHEETCORD for command-and-control communications, allowing the threat actor to issue commands and exfiltrate data via a legitimate…
Vivaldi Browser Targeted by SHEETCORD
Vivaldi is among the browsers targeted by SHEETCORD's browser shortcut hijacking persistence mechanism.
Brave Browser Targeted by SHEETCORD
Brave is among the browsers targeted by SHEETCORD's browser shortcut hijacking persistence mechanism.
Opera Browser Targeted by SHEETCORD
Opera is among the browsers targeted by SHEETCORD's browser shortcut hijacking persistence mechanism.
PowerShell Used by SHEETCORD for Remote Command Execution
SHEETCORD uses PowerShell to execute remote commands on infected systems, providing the threat actor with a powerful scripting interface.
Visual Basic Script Used by SHEETCORD for Persistence
SHEETCORD uses a Visual Basic Script in the Windows Startup folder to establish persistence on infected systems.