Skip to content

YARA rules tagged UTA0040

5 rules carry the tag “UTA0040”.

  • Detect the ICONICSTEALER malware family.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2023-03-30
  • Detects the MACOS version of the ICONIC loader.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2023-03-30
  • Detects the malicious library delivered in the backdoored 3CX installer.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2023-03-30
  • Detects 3CX installers created in March 2023, 3CX was known to be compromised at this time.

    GenericVolexity threat-intel· threatintel@volexity.com· 2023-03-30
  • Detection of malicious ICO files used in 3CX compromise.

    APT / threat actorVolexity threat-intel· threatintel@volexity.com· 2023-03-30