New Flagpro malware linked to Chinese state-backed hackers
The cyber espionage group APT (Advanced Persistent Threat) Blackwell has been targeting Japanese business with a new type of malware that researchers call “Flag pro”.” In the Flag professional v1.0 application, if a dialog box titled Windows セ キ ュ リ テ ィ appears when Flagpro is accessing an external site, Flagpro will automatically click the OK button to close the dialog box” discusses NTT Security report. In February 2021, a report from Unit 42 connected Blackwell to Waterbear Flag pro, another cyber espionage group believed to have the backing of the Chinese government like Apt, Black tech, Knowledge and Refinement to adjust their tools to new reports like this one, Flag pro is likely to be customized for more stealth use.As the NTT report concludes, “Recently they (Blackwell) started utilizing another new malware called Selfsame Loader and Spider RAT.
The cyber espionage group APT (Advanced Persistent Threat) Blackwell has actually been targeting Japanese business with a brand-new type of malware that scientists call “Flag pro”.” In the Flag pro v1.0 implementation, if a dialog box titled Windows セ キ ュ リ テ ィ appears when Flagpro is accessing an external website, Flagpro will automatically click the OK button to close the dialog box” describes NTT Security report. In February 2021, a report from Unit 42 connected Blackwell to Waterbear Flag pro, another cyber espionage group thought to have the support of the Chinese government like Apt, Black tech, Knowledge and Refinement to adapt their tools to brand-new reports like this one, Flag pro is likely to be customized for more stealth use.As the NTT report concludes, “Recently they (Blackwell) began using another brand-new malware called Selfsame Loader and Spider RAT.
