Do Son Greedy Sponge, a financially motivated group, is back with an upgraded AllaKore RAT and SystemBC, targeting Mexican organizations for banking credentials and financial fraud.
AllaKore RAT
The report highlights a coordinated campaign waged by the notorious SideCopy and Transparent Tribe (APT36) groups
This operation, driven by a financially motivated threat actor, utilizes a modified version of the open-source remote access tool, AllaKore RAT
Dubbed Operation RusticWeb, this campaign, uncovered in October 2023, demonstrates a nuanced approach to cyber espionage.