Perseus

The Perseus campaign was a significant cybersecurity operation aimed at combating the Snake malware, a signature tool used by the Russia-sponsored Turla advanced persistent threat (APT). This operation, dubbed "Operation Medusa," was conducted by joint intelligence agencies, including the FBI, and was primarily targeted at protecting small and medium-sized businesses. The campaign was characterized by the use of an innovative tool developed by the FBI, named PERSEUS, which was used to disable the harmful Snake malware on compromised systems. PERSEUS operated by initiating communication sessions with the Snake malware implant on a targeted computer. It then issued commands that prompted the Snake implant to deactivate itself while leaving the host computer and legitimate applications unaffected. This process involved the malware overwriting its own vital components, effectively neutralizing it. The execution of PERSEUS on machines occurred without users' active consent, facilitated by a search warrant issued by a US magistrate judge authorizing remote access. The impact of the Perseus campaign was substantial, leading to the successful disabling of the Turla's Snake malware on numerous compromised computers. This was achieved in May through the strategic use of the PERSEUS tool. By providing all-around digital protection for small and medium-sized businesses through state-of-the-art software solutions, flexible online training, and emergency response, the Perseus campaign marked a significant stride in cybersecurity efforts against advanced persistent threats.