In 2022, the activities of a hacker group that carried out cyber espionage by secretly collecting documents from the infrastructures of several state bodies and organizations were neutralized in Kazakhstan, the press service of the KNB of the republic reported.
The cyber group conducted its activities covertly. To secure positions and steal files, launched malware disguised itself as legitimate operating system processes or other installed software signed by real developers. They did not arouse suspicion among ordinary users and even system administrators. The hackers exploited security flaws, so-called “0-day” vulnerabilities, as well as malware and APT techniques previously unknown to antivirus labs. Information security tools did not detect this malicious software, which allowed hackers to carry out their activities unhindered, the report said.
