Rewterz
Rewterz Threat Alert – Redaman/RTM Banking Trojan Campaigns
March 5, 2019
Rewterz
Rewterz Threat Alert – Threat Actors Targeting Banks Using Tools to Bypass Cyber Security Controls
March 6, 2019

Rewterz Threat Alert “Beyond The Grave” Virus – Threat Indicators

Severity

Medium

Analysis Summary


‘Beyond The Grave (BYTG) virus has surfaced in a phishing campaign that executes a malicious code initiated by a malicious URL. The campaign aims to alter data confidentiality in the targeted hedge funds and a post by the phisher says that BYTG will continue to attack banking and financial institutions.

Impact


Data breach


Indicators of Compromise

IP(s) / Hostname(s)

46.226.108[.]201

URLs

  • aksia[.]co
  • hxxp[:]//aksia[.]co/research/report/interim?id=4547b495-1863-4e5c-8613-ab38dd121144

Email Address

kmorgan[@]aksia[.]co

bill.trust.88992[@]mail[.]com

Remediation


Block the threat indicators at their respective controls.