“While still relying on publicly available offensive security tools, the group has been refining its custom toolset and utilizing new techniques to avoid detection.”įound this article interesting? Follow THN on Facebook, Twitter and LinkedIn to read more exclusive content we post. Enter the password you created and click Log On.

Select 'Remote control' if not already selected. Enter the ID of the target computer into the 'Partner ID' field. “Analysis of MuddyWater activity suggests the group continues to evolve and adapt their techniques,” SentinelOne researcher Amitai Ben Shushan Ehrlich said. Click the Remote Control menu in the left panel. The program consists of a host server, which is installed on the computer you want to control, and a portable viewer that is used to connect to the. Remote Utilities enables you to access a remote computer and operate it with full desktop control, as if you were sitting in front of it. Malware samples attributed to the advanced persistent threat (APT) have been made available on the VirusTotal malware aggregation repository, which can be accessed here. Remote Utilities (Viewer + Host + Agent) 6.3.0.6 19.9 Mb. Last month, Symantec’s Threat Hunter Team publicized findings about a new wave of hacking activities unleashed by the Muddywater group against a string of telecom operators and IT companies throughout the Middle East and Asia during the previous six months using a blend of legitimate tools, publicly available malware, and living-off-the-land ( LotL) methods.Īlso incorporated into its toolset is a backdoor named Mori and a piece of malware called PowGoop, a DLL loader designed to decrypt and run a PowerShell-based script that establishes network communications with a remote server.

Remote utilities hack