Cybersecurity researchers have spotted new threat actors targeting government, aviation, education, and telecoms firms.
A report from Symantec outlined a group they dubbed Lancefly was spotted using a custom piece of malware to target the abovementioned organizations. Lancefly is using a custom infostealer called Merdoor which, according to the researchers, has been circulating since at least 2018. The researchers spotted it in certain campaigns back in 2020 and 2021, but for this specific campaign, the malware’s been in use since mid-2022 and continued into 2023.
