Unit 42 researchers analyze CL-STA-0969, a malware targeting telecoms, linked to Liminal Panda.

Unit 42 researchers have analyzed CL-STA-0969, activity targeting critical telecommunications infrastructure. Activity observed through most of 2024 shows overlaps with the nation-state adversary Liminal Panda. Key TTPs include custom malware (AuthDoor, GTPDoor), DNS tunneling and exploitation of legacy system vulnerabilities. Read the full article: https://bit.ly/45t7aoj