STAR Webcast: xHunt - An Anime Fan\\'s Attack Campaign in the Middle East

  • Webcast Aired Wednesday, 25 Mar 2020 10:30AM EDT (25 Mar 2020 14:30 UTC)
  • Speakers: Katie Nickels, Brittany Barbehenn, Robert Falcone

'

'

Rundown ' STAR Webcast Series hosted by Katie Nickels

Between May and June 2019, we observed previously unknown tools used in the targeting of transportation and shipping organizations based in Kuwait, all of which their developer named after characters of a popular anime series. These tools were previously unknown, and we had no connections to previous attack campaigns, so we began researching this threat activity to share our findings with the community. While pivoting to other related tools and infrastructure, we found another tool named after a weapon used in another anime series that was likely developed by the same individual. This additional tool is related to known attacks carried out in June and July of 2018 on government organizations in Kuwait. Our presentation will discuss this attack campaign and explore the pivots we made while performing this research, as well as the tools and TTPs used by the actors in this campaign and throughout 2019.