The Fancy Bear hacking group’s Lojax rootkit is far from a one-off tool, and may have been active in the wild for years before it was first reported. This is according to an analysis from Netscout’s ASERT team, which took a deep dive into not only the malware itself, but also its command-and-control network and associated domains.
Read full news article on The Register