Researchers have identified a new Chameleon campaign targeting hospitality employees, where the attackers employed a deceptive tactic, disguising malicious software as a CRM app.  File names uploaded to VirusTotal revealed evidence of targeted attacks, including a reference to a prominent international restaurant chain. This suggests a tailored approach to compromising specific organizations within the hospitality industry.  Masquerading as CRM Conventions regarding the naming of droppers and payloads indicate that the campaign is aimed at the hospitality industry and possibly more general business-to-consumer sectors.  Successful infection of devices with corporate banking access grants the Chameleon malware control over business accounts, posing a significant organizational risk.

Source: GBHackers