Russian hackers trojanize WebEx, Zoom apps to push Starland malware

Russian hackers are using trojanized versions of WebEx and Zoom to distribute Starland malware. The malware campaign targets firms in the US and Europe. Coverage from Intelligent CISO, Security Affairs, IT Pro, Cisco Talos Blog, and BleepingComputer highlights the use of fake installers to deploy the Starland Remote Access Trojan (RAT) and a bespoke WLDR command-and-control implant.

The campaign is financially motivated, according to Cisco Talos Blog. The coverage emphasizes the sophistication of the malware and the methods used to distribute it. Cisco Talos Blog details the technical aspects of the Starland RAT and the WLDR implant.

Security Affairs and BleepingComputer focus on the trojanization of WebEx and Zoom, while IT Pro and Intelligent CISO report on the broader implications for business security. Watch for updates on the extent of the malware's spread and any responses from WebEx and Zoom. Coverage does not yet specify the number of affected firms or the potential impact on users.