Chinese espionage deploys new rootkit with code#

These gadgets will later become outlets of ransomware, remote code files, and data harvesters.ĭespite its rarity, MoonBounce malware is believed to be under the control of an espionage group called APT4. There are times that this threat can be used to infect other systems by using a device or group of devices to carry out attacks. 24, the recently discovered malware is made for multi-stage attack, thus becoming a stage one malware. Related Article: Australia Telecom Hack: Huawei Documents Point Out to Chinese Spies' 'Secret Activities' Chinese Government-Sponsored Group Behind MoonBounce MalwareĪccording to Kaspersky, in another report by Tech Radar on Monday, Jan. However, as time passes, they get used to it until it becomes a part of the norm. The Kaspersky researchers said that this malware is challenging to remove at first since it appears to be unachievable. These include MosaicRegressor, ESPectre, UEFI bootkit, and LoJax.

While this was the first time that cybersecurity analysts encountered MoonBounce malware, other malware already lived in the motherboard's SPI memory before. Since this malware is considered a bootkit, it can only be exterminated by doing a complex process called SPI memory re-flashing.Īnother costly solution that can entirely delete it in the computer is replacing the PC's motherboard. Kaspersky stated that there is only one way to get rid of this pesky software. Either way, reinstalling your operating system won't do anything to erase it. Unlike other malware, which normally thrive in the hard drive, it would remain in the computer even after replacing its hard drive.