Saturday, March 18, 2023
  • Advertise With Us
  • Write For Us
  • Contact Us
  • About Us
  • Editorial Calendar
Download Latest Issue - Free!
The Cyber Express
Ransomware Report
  • MagazineDownload
  • Firewall Daily
    • All
    • Dark Web News
    • Data Breach News
    • Hacking News
    • Ransomware News
    • Vulnerabilities
    Gamekaking Data Breach

    Gamekaking Data Breach? Leakbase Claims to Upload 19 Million Rows of Stolen Information

    Medusa Ransomware Group

    Medusa Ransomware Group Targets National Institute of Ocean Technology

    BreachForums

    FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

    Clop Ransomware Group Adds Hitachi Energy

    Hitachi Energy Confirms Security Incident After Clop Ransomware Adds it to Victim List

    Onex Data Exposed

    Onex Data Exposed, Linked to GoAnywhere MFT Security Incident

    Euler Finance Cyber Attack

    Euler Finance Cyber Attack Hackers Returns $165k to Victim

    Independent Living Systems Data Breach

    Independent Living Systems Data Breach Puts 4.2 Million Individuals at Risk

    Loyola University Data Breach

    Loyola University Data Breach, Hackers Claim to Have Access to Personal Student Data

    Pornhub

    Pornhub Removes Wagner Ad Recruiting Soldiers For Russian War

  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    BreachForums

    FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    Insider threat mitigation

    Behavioral Psychology, a Boon for Insider Risk Mitigation

    Safer Internet

    International Safer Internet Day: How Safe Are Our Teenagers Online?

    TRAI

    TRAI Asked to Involve MoD in Drafting Big Data Regulations & Policies

    cybersecurity

    Cybersecurity incidents may soon be ‘uninsurable’

    Australia

    Australia Ropes in Tech Veterans to Set Up Cyber Action Plan

    Active Directory

    Prevent Ransomware: Save the Active Directory

    Privacy Penalty Bill

    Privacy Penalty Bill: Australian Parliament Approves Heavy Fines

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business News
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    GISEC Global 2023

    GISEC Global 2023: Knowledge Sharing, Collaboration Vital to Fend off Cyberattacks, say Experts

    Call & Contact Center Expo 2023 Las Vegas

    Call & Contact Center Expo 2023 Las Vegas

    Former BookMyShow CTO Mahesh Vandi Chalil

    Cyble Appoints Former BookMyShow CTO Mahesh Vandi Chalil as Chief Product and Technology Officer

    GISEC 2023

    GISEC 2023: Microsoft Highlights Zero Trust Approach and Mixed Reality Policing Tools

    GISEC Global 2023

    GISEC Global 2023: ‘Take the Fight to Cyber Attackers’ Urges UAE Cybersecurity Council Paper

    Cyble in Forbes List

    Cyble Recognized by Forbes as One of America’s Best Startup Employers 2023

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    Cyble Among Top 50 Emerging Companies

    Cyble Among Top 50 Emerging Companies Across Governance Risk & Compliance Solutions Sector

    Call and Contact Center Expo

    The Countdown Begins: The Call and Contact Center Expo Las Vegas 2023 is Officially Here!

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • EventsCyberCon
    •  Cyber Security Webinar
    • World CyberCon Middle East 2023
    • Endorsed Events
No Result
View All Result
The Cyber Express
  • MagazineDownload
  • Firewall Daily
    • All
    • Dark Web News
    • Data Breach News
    • Hacking News
    • Ransomware News
    • Vulnerabilities
    Gamekaking Data Breach

    Gamekaking Data Breach? Leakbase Claims to Upload 19 Million Rows of Stolen Information

    Medusa Ransomware Group

    Medusa Ransomware Group Targets National Institute of Ocean Technology

    BreachForums

    FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

    Clop Ransomware Group Adds Hitachi Energy

    Hitachi Energy Confirms Security Incident After Clop Ransomware Adds it to Victim List

    Onex Data Exposed

    Onex Data Exposed, Linked to GoAnywhere MFT Security Incident

    Euler Finance Cyber Attack

    Euler Finance Cyber Attack Hackers Returns $165k to Victim

    Independent Living Systems Data Breach

    Independent Living Systems Data Breach Puts 4.2 Million Individuals at Risk

    Loyola University Data Breach

    Loyola University Data Breach, Hackers Claim to Have Access to Personal Student Data

    Pornhub

    Pornhub Removes Wagner Ad Recruiting Soldiers For Russian War

  • Essentials
    • All
    • Compliance
    • Governance
    • Policy Updates
    • Regulations
    BreachForums

    FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    Insider threat mitigation

    Behavioral Psychology, a Boon for Insider Risk Mitigation

    Safer Internet

    International Safer Internet Day: How Safe Are Our Teenagers Online?

    TRAI

    TRAI Asked to Involve MoD in Drafting Big Data Regulations & Policies

    cybersecurity

    Cybersecurity incidents may soon be ‘uninsurable’

    Australia

    Australia Ropes in Tech Veterans to Set Up Cyber Action Plan

    Active Directory

    Prevent Ransomware: Save the Active Directory

    Privacy Penalty Bill

    Privacy Penalty Bill: Australian Parliament Approves Heavy Fines

    • Regulations
    • Compliance
    • Governance
    • Policy Updates
  • Features
    • Cyber Warfare
    • Espionage
    • Workforce
      • Learning & Development
  • Business News
    • All
    • Appointments
    • Budgets
    • Mergers & Aquisitions
    • Partnerships
    • Press Release
    • Startups
    GISEC Global 2023

    GISEC Global 2023: Knowledge Sharing, Collaboration Vital to Fend off Cyberattacks, say Experts

    Call & Contact Center Expo 2023 Las Vegas

    Call & Contact Center Expo 2023 Las Vegas

    Former BookMyShow CTO Mahesh Vandi Chalil

    Cyble Appoints Former BookMyShow CTO Mahesh Vandi Chalil as Chief Product and Technology Officer

    GISEC 2023

    GISEC 2023: Microsoft Highlights Zero Trust Approach and Mixed Reality Policing Tools

    GISEC Global 2023

    GISEC Global 2023: ‘Take the Fight to Cyber Attackers’ Urges UAE Cybersecurity Council Paper

    Cyble in Forbes List

    Cyble Recognized by Forbes as One of America’s Best Startup Employers 2023

    Cybersecurity Excellence Awards

    Cybersecurity Excellence Awards: Cyble Rated Fastest Growing Cybersecurity Company

    Cyble Among Top 50 Emerging Companies

    Cyble Among Top 50 Emerging Companies Across Governance Risk & Compliance Solutions Sector

    Call and Contact Center Expo

    The Countdown Begins: The Call and Contact Center Expo Las Vegas 2023 is Officially Here!

    • Startups
    • Mergers & Aquisitions
    • Partnerships
    • Appointments
    • Budgets
    • Research
      • Whitepapers
      • Sponsored Content
      • Market Reports
    • Interviews
      • Podcast
  • EventsCyberCon
    •  Cyber Security Webinar
    • World CyberCon Middle East 2023
    • Endorsed Events
No Result
View All Result
The Cyber Express
No Result
View All Result
Home Firewall Daily

Researchers Discover Unknown Hacker Group Operating For Years Without Detection

Avantika Chopra by Avantika Chopra
September 25, 2022
in Firewall Daily
0
Metador Hacker Group
591
SHARES
3.3k
VIEWS
Share on LinkedInShare on Twitter

It’s a rare occurrence when an active hacking group continues its operation without detection for years. However, once that happens, it hints at something large — possibly a cyber espionage campaign led by big players in the cybersecurity sector.

During its investigation, a team of cybersecurity researchers at SentinelOne’s SentinelLabs discovered a unique Threat Actor (TA) that uses advanced techniques to hinder detection. According to the report by the security company, there are around ten such hacking groups collectively, and they have links to China and Iran.

You might also like

Gamekaking Data Breach? Leakbase Claims to Upload 19 Million Rows of Stolen Information

Medusa Ransomware Group Targets National Institute of Ocean Technology

FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

Though multiple groups might be working at their own pace to target different organizations within a sector, there are cases where threat actors collaborate to target a single company, government, nation, or individual. According to SentinelOne, the unknown group is believed to operate in alignment and seems to be working towards a nation-state interest.

The Metador group

According to Cyberscoop, the unknown cyber threat group is dubbed “Metador” and deconstructed as “I am meta”. Additionally, the researchers stated that the threat actor might have its command-and-control servers in Spain because of the linguistic responses collected from the malware code.

As per the research, the group has been actively initiating cyberattacks for the last two years and is backed by extensive power and resources to maintain its daily operation. As for its nature, the hacker collective uses two Windows malware platforms to deploy into the victim’s devices and an additional Linux implant, further expanding its capability to rapidly adapt to modern threat detection systems.

The hacker group reportedly targeted telecom networks, internet service providers, universities in the Middle East and Africa, among other international regions. However, the security experts could only tap into a tiny bit of its massive network due to the group’s advanced hindering techniques that limit researchers from connecting one victim to another. This style of cyberattacks can be achieved through multiple IP addresses and different patterns of attacks that diminish any possibility of linking incidents.

Researchers analyze the sample malware

The researchers at SentinelOne said that a “reliable attribution wasn’t possible” because the malware developers were fluent in English — especially internet slang with words like LOL, smiling faces, emoji, and others.

Moreover, the code also had some Spanish words — which hypothetically confirmed that the group might be operating internationally with a link to Spanish-speaking individuals and groups. The source of some of the samples collected by the researchers had pop culture references, including lyrics from the 90s song called “Ribbons’ ‘ by British pop punk band The Sisters of Mercy.

Metador has successfully targeted its victims and maintained a streak of working covertly without description or glorifying its feats. The researchers and cybersecurity specialists are yet to determine the full extent of the group, how it operates, and who or what is behind it.

Share this:

  • Click to share on LinkedIn (Opens in new window)
  • Click to share on Reddit (Opens in new window)
  • Click to share on Twitter (Opens in new window)
  • Click to share on Facebook (Opens in new window)
  • More
  • Click to email a link to a friend (Opens in new window)
  • Click to share on WhatsApp (Opens in new window)

Related

Tags: malicious softwaremalware groupmalware virusMetadorMetador groupThe Cyber ExpressThe Cyber Express News
Previous Post

GitHub and CircleCI Users Hit by Phishing Attack

Next Post

‘Anonymous’ Attacks Iran Govt., Releases Data of Parliament Members

Avantika Chopra

Avantika Chopra

Related Posts

Gamekaking Data Breach
Dark Web News

Gamekaking Data Breach? Leakbase Claims to Upload 19 Million Rows of Stolen Information

by Ashish Khaitan
March 18, 2023
Medusa Ransomware Group
Data Breach News

Medusa Ransomware Group Targets National Institute of Ocean Technology

by Ashish Khaitan
March 18, 2023
BreachForums
Compliance

FBI Arrests BreachForums Operator ‘Pompompurin’, Slaps Cybercrime Charges

by Chandu Gopalakrishnan
March 18, 2023
Clop Ransomware Group Adds Hitachi Energy
Data Breach News

Hitachi Energy Confirms Security Incident After Clop Ransomware Adds it to Victim List

by Vishwa Pandagle
March 18, 2023
Onex Data Exposed
Data Breach News

Onex Data Exposed, Linked to GoAnywhere MFT Security Incident

by Vishwa Pandagle
March 17, 2023
Next Post
Anonymous

'Anonymous' Attacks Iran Govt., Releases Data of Parliament Members

Latest Issue is Out. Subscribe Now

Women in Cybersecurity

Download Now

CRIL


Follow Us On Google News

Never miss an update. Subscribe!

* indicates required

Top 10 Cybersecurity Jobs

Categories

About The Cyber Express

The Cyber Express

Cyber Security News and Magazine

The Cyber Express is a handbook for all stakeholders of the internet that provides information security professionals with the latest news, updates and knowledge they need to combat cyber threats.

Follow The Cyber Express

Contact

For editorial queries: [email protected]

For marketing, PR & media partnerships: [email protected]

For media kit and digitals sales: [email protected]

For Sponsorship/Event Partnership: [email protected]

For Conferences related information: [email protected]

Our Address

We’re remote friendly, with office locations around the world:

San Francisco, Atlanta, Rome,
Dubai, Mumbai, Bangalore, Hyderabad,  Singapore, Jakarta, Sydney, and Melbourne

 

Headquarters:

The Cyber Express LLC
555 North Point Center E
Alpharetta, GA 30022, USA.

Tel: (678) 578-8838

Events: +1 (678) 578-4140

 

India Office:

Cyber Express Media Network
HD-021, 4th Floor, C Wing, Building No.4. Nesco IT Park, WE Highway, Goregaon East, Mumbai, Maharashtra, India – 4000063

Tel: (678) 578-8838

Events: +1 (678) 578-4140

Subscribe to Our Feed

RSS Feeds

Follow Us On Google News

© 2022 The Cyber Express (Cyber Security News and Magazine) | By Cyble Inc.

No Result
View All Result
  • Firewall Daily
  • Business News
  • Cyber Essentials
  • Features
  • Cyber Security Magazine
  • Events
    • World CyberCon Middle East 2023
    •  Cyber Security Webinar

© 2022 The Cyber Express (Cyber Security News and Magazine) | By Cyble Inc.

Welcome Back!

Login to your account below

Forgotten Password?

Retrieve your password

Please enter your username or email address to reset your password.

Log In

Add New Playlist

This website uses cookies. By continuing to use this website you are giving consent to cookies being used. Visit our Privacy and Cookie Policy.