Command & Conquer: Generals was released for Microsoft Windows and Mac OS operating systems in 20. SHARPEXT allows the hackers to create lists of email addresses to ignore and to keep track of email or attachments that have already been stolen.Command & Conquer: Generals is a (RTS) real-time strategy computer game and the seventh installment of the Command & Conquer series. Upload a new attachment to the remote server.Ĭommented by the attacker receive an attachments list to be exfiltrated. This list is continuously updated as SHARPEXT executes.Ĭollect a blacklist of email senders that should be ignored when collecting email from the victim.Īdd a domain to the list of all domains viewed by the victim. List email domains with which the victim has previously communicated. This list is continuously updated as SHARPEXT executes.

List previously collected email from the victim to ensure duplicates are not uploaded. Once installed, the extension can perform the following requests: HTTP POST Data Previously we have seen DPRK threat actors launch spear phishing attacks where the entire objective was to get the victim to install a browser extension vs it being a post exploitation mechanism for persistence and data theft.' In its current incarnation, the malware works only on Windows, but Adair said there's no reason it couldn't be broadened to infect browsers running on macOS or Linux, too. Volexity President Steven Adair said in an email that the extension gets installed 'by way of spear phishing and social engineering where the victim is fooled into opening a malicious document.

SHARPEXT is targeting organizations in the US, Europe, and South Korea that work on nuclear weapons and other issues North Korea deems important to its national security. The group is sponsored by North Korea's government and overlaps with a group tracked as Kimsuky by other researchers. Further Reading North Korean hackers stole nearly $400 million in crypto last yearThe malware has been in use for 'well over a year,' Volexity said, and is the work of a hacking group the company tracks as SharpTongue.

Command and conquer mac download