#Nanocore, #Netwire & #AsyncRAT spreading campaign uses public cloud infrastructure - Threat actors are increasingly using #cloud #technologies to achieve their objectives without having to resort to hosting their own #infrastructure. These types of cloud #services like Microsoft Azure and Amazon AWS allow attackers to set up their infrastructure and connect to the #internet with minimal time or monetary commitments. It also makes it more difficult for defenders to track down the attackers' operations. This actor is using the DuckDNS dynamic DNS service to change domain names of the C2 hosts. #malware #cyber #email #threats #informatique

http://blog.talosintelligence.com/2022/01/nanocore-netwire-and-asyncrat-spreading.html