A suspected South Asian cyber espionage threat group, Bitter, has targeted a Turkish defense sector using C++-malware tracked as WmRAT and MiyaRAT. This attack used data streams in a RAR archive to create a scheduled task on the target machine as part of a wider threat trend tracked by enterprise security provider, Proofpoint. The group’s previous targets have been in Asia and include China, Pakistan, India, Saudi Arabia, and Bangladesh.
How AI can supercharge security operations
AI is being utilised in cybersecurity, particularly in security operations, according to a survey by Insight Partners. AI has the ability to summarise security incidents,