Thai government officials have been targeted by a hacking campaign that uses a hitherto undocumented backdoor called Yokai, delivered via DLL side-loading. Delivered via an archive with misleading file names related to an ongoing criminal case, its initial infection vector remains uncertain, though researchers believe it is likely spear-phishing. The sophisticated attack installs a command-and-control (C2) server, allowing the attackers to operate clandestinely on the victim’s system. The backdoor is not exclusive to Thailand and could potentially be used globally.
'Cyber incident' impacting DuPage County Sheriff's Office, DuPage County Courthouse: officials – ABC7 Chicago
A cyber incident has affected the DuPage County Sheriff’s Office and the DuPage County Courthouse, according to officials. The incident is currently under investigation, impacting
