The Threat Hunt That Uncovered Novel Malware

What do you do when a required software program, recommended by a trusted member of your supply chain, comes inadvertently bundled with sophisticated malware?

A global technology company came into such a predicament after opening operations in China. A routine threat hunt led to the discovery of an entirely novel malware campaign — identified as GoldenSpy by LevelBlue SpiderLabs — and was extracted from the client’s network before any nefarious activity could occur. Like all other malware, the LevelBlue SpiderLabs team reverse engineered the threat, applied indicators of compromise to LevelBlue tools and shared this information with the community to protect global organizations from this aggressive threat.