Shark

Shark is a malicious software (malware) developed and deployed by the cybercriminal group OilRig. In 2021, OilRig updated its DanBot backdoor and began deploying Shark, along with Milan and Marlin backdoors as mentioned in the T3 2021 issue of the ESET Threat Report. The malware was designed to exploit and damage computer systems, often infiltrating them through suspicious downloads, emails, or websites. Once inside a system, it could steal personal information, disrupt operations, or even hold data hostage for ransom. Throughout 2022, the same pattern was observed on multiple occasions, with new downloaders being deployed in the networks of previous OilRig targets. For instance, between June and August 2022, the OilBooster, SC5k v1, and SC5k v2 downloaders, along with the Shark backdoor, were detected within the network of a local governmental organization in Israel. Besides the overlap in tools and targeting, there were multiple similarities between the Solar backdoor and the backdoors used in Out to Sea, mostly related to upload and download schemes to communicate with the Command & Control (C&C) server. The Shark malware has been linked to other cybersecurity threats, including the successful Shark Tank bust. This case involved a dating app that received positive feedback on Reddit, highlighting the broad scope of potential targets for such malicious software. To protect against such threats, it's recommended to use privacy measures like a virtual private network (VPN), such as Surf Shark or ExpressVPN, to obscure IP addresses and provide encryption. Despite these measures, the continuous evolution of cyber threats underlines the need for constant vigilance and updating of security protocols.