DoNot Team’s New Firebird Backdoor Hits Pakistan and Afghanistan

Cybersecurity firm Kaspersky has linked the known threat actor DoNot Team to the use of a new .NET-based backdoor named Firebird, targeting victims in Pakistan and Afghanistan. The attack chains have also been configured to deliver a downloader, named CSVtyrei. The attackers are suspected to be of Indian origin, employing spear-phishing emails and rogue Android apps to spread malware.