Bedrohung: Since March 2018 we have discovered several infections where a previously unknown Trojan was injected into the lsass.exe system process memory.
Betrifft: This campaign was active immediately prior to Central Asian high-level meeting and we suppose that actor behind still follows regional political agenda.
Maßnahme: Administratoren sollten unverzüglich verfügbare Sicherheitsupdates einspielen, Workarounds anwenden und Systemlogs auf verdächtige Zugriffe prüfen.