Weekly Intelligence Summary 14 Feb 2020

In the spotlight this week: A recently discovered campaign has used the legitimate storage services of BitBucket to facilitate malware distribution and increase the perceived trust between an unknown threat actor and a targeted system. These methods likely facilitate obfuscation and increase the likelihood of maintaining persistence on a target. The campaign detonated a suite of malware variants on a single host, not only to inflict maximum damage on a victim, but also to make identifying and eradicating the different malware from a system comparatively more arduous. Apart from abusing Bitbucket, the attackers went through great lengths to avoid detection, such as providing regular updates to malware and using packers to impede analysis attempts.