Kaspersky links new Tomiris malware to Nobelium group

Security outfit Kaspersky has presented research on what appears to be the second new tool of the Nobelium advanced persistent threat group outed so far this week – a piece of malware dubbed Tomiris. The new malware is linked to an earlier tool known as Sunshuttle, itself a second-stage successor to the Sunburst malware used …

[amanfromMars 1]

The MasterPlan. If you can't beat 'em, join 'em/copy them ? Who ever would have a'thunk it ?

Good Cop ....

"I believe complex threats such as FinFisher demonstrate the importance for security researchers to cooperate and exchange knowledge," Kuznetsov concluded, "as well as invest in new types of security solutions that can combat such threats." ....... https://www.theregister.com/2021/09/28/kasperky_finfisher_spyware_report/

Bad Cop .....

"The general workflow of the two programs, in particular the way features are distributed into functions, feel similar enough that this analyst feels they could be indicative of shared development practices.

One a criminalised conspiracy, the other free enterprise doing its private piratical thing ?

What coloured hat do you like most to wear to fit in with your true persona or create another version of oneself for so many other different kinds of work, rest and play?