New supply chain attack via trojanized chat installer identified
New Supply Chain Attack via trojanized Comm100 Chat installer identified by the US cybersecurity team CrowdStrike. It is found that the malware was delivered from a signed Comm100 Installer that could be downloaded from the company’s website.
The US cybersecurity team CrowdStrike Falcon identified a supply chain attack during the installation of a chat-based customer engagement platform, Comm100 Live Chat. Investigations show that the malware was delivered from a signed Comm100 Installer that could be downloaded from the company’s website. CrowdStrike stated that the payload delivered through this supply chain attack targeting online gambling entities in Asia is different from the incidents hackers executed in the past. Considering the pattern of behavior, CrowdStrike stated that the hackers are suspected to have a nexus with China.
About author
DW Team
The GIP Digital Watch Observatory team, consisting of over 30 digital policy experts from around the world, excels in the fields of research and analysis on digital policy issues. The team is backed by the creative prowess of Creative Lab Diplo and the technical expertise of the Diplo tech team.