Marc Maiffret appointed chief security architect at FireEye

Such a development comes months after Banshee Stealer was reported by Elastic Security Labs to enable extensive system, cryptocurrency wallet, browser, and browser extension data compromise although its serious data exfiltration capabilities have been watered down by its less advanced composition.

RomCom leveraged a fake website to redirect targets to an exploit-hosting server, which then facilitated the deployment and execution of the RomCom backdoor that could enable further payload compromise.

After achieving initial network access through the exploitation of Ivanti Connect Secure VPN, Fortinet FortiClient EMS, Sophos Firewall, and Microsoft Exchange vulnerabilities, Salt Typhoon proceeds with the deployment of GhostSpider, which ensures stealth through its expansive module command support, and other backdoors.