APT Groups Target U.S. Government Agencies with CovalentStealer
The U.S. government alerted against state-backed hackers using the custom CovalentStealer malware and Impacket framework to steal confidential information from a Defense Industrial Base organization. To gain initial access through the victim’s network, the attackers attempted to exploit ProxyLogon vulnerabilities in Microsoft Exchange Server.