Shark

Shark is a malicious software (malware) deployed by the cyber threat group known as OilRig. In 2021, OilRig updated its DanBot backdoor and began deploying multiple new backdoors including Shark, Milan, and Marlin, as reported in the T3 2021 issue of the ESET Threat Report. This malware can infiltrate systems through suspicious downloads, emails, or websites, often unbeknownst to the user. Once inside, it can compromise personal information, disrupt operations, or even hold data hostage for ransom. Throughout 2022, the same pattern was observed on multiple occasions with new downloaders being deployed in the networks of previous OilRig targets. For example, between June and August 2022, the OilBooster, SC5k v1, and SC5k v2 downloaders and the Shark backdoor were all detected in the network of a local governmental organization in Israel. Both the Solar and Shark backdoors use URIs with simple upload and download schemes to communicate with the C&C server, indicating a clear overlap in tools and targeting used by OilRig. In a different context, the term "Shark" has been associated with a successful "Shark Tank"-style competition, where each finalist makes a presentation and then answers questions from a panel. This event allows cybersecurity companies to demonstrate their technology and discuss case studies with existing customers. The use of a virtual private network (VPN) like Surf Shark or ExpressVPN is recommended for enhanced privacy and encryption during these events.