Developers in the Asian gaming industry again targeted in supply-chain attacks distributing malware in legitimately signed software.| www.welivesecurity.com
In July 2017, during an investigation, suspicious DNS requests were identified in a partner’s network. The source of the queries was a software package produced by NetSarang. Our analysis showed that recent versions of the software had been surreptitiously modified to include an encrypted payload that could be remotely activated by a knowledgeable attacker.| securelist.com