Photo: Epoxydude via Getty

A well-known cyber crime group launched new malware that may signal that they — and possibly other groups as well — are moving towards stealth, reconnaissance and agility, according to Proofpoint, the firm that discovered the new "Marap" malware.

What's a Marap? Marap was created by the same group responsible for the widespread banking credential harvester Dridex and the ransomware Locky. It's designed to download other programs — the first stage of an attack.

Marap is stealthy, even among downloaders. Kevin Epstein, vice president of Proofpoint's threat operation center, explains: Marap is loaded up with tools to evade security tools and analysis and appears to be designed to lay mostly dormant while the hackers decide what they want to do.

What they're saying: "We don't see many things this stealthed and quiet," said Epstein, even among other downloaders.

The strategy: Epstein contrasts Marap with other downloaders that might come bundled with other functions or immediately start a download of a more feature rich malicious program. Instead, Marap sends a very small package of information about the computer it infected back to its developers and awaits further instructions.

If Marap is the first stage in an attack, Proofpoint has yet to see stage two. They have not seen Marap execute instructions to start downloading anything.

  • Epstein said the firm believes that the delay is to use the information about its victims to determine the most lucrative next step, whether that's setting up long-term shop in a server with valuable data or installing a cryptocurrency mining program in a more mundane system.

Why it matters: The firm thinks this might signal a change in how attackers approach their craft, from a period of quick hit criminal moves to more deliberate action.

"You don't switch from stick-ups to heists if the stick-ups still get all the money you want," explained Epstein.

The criminal group behind Marap, sometimes refered to as TA505, is known for distributing its malware over the Necurs botnet, which has changed its main focus in recent days.

Go deeper

Updated 56 mins ago - Politics & Policy

Coronavirus dashboard

Illustration: Sarah Grillo/Axios

  1. Global: Total confirmed cases as of 7:30 p.m. ET: 32,694,155 — Total deaths: 991,273 — Total recoveries: 22,575,658Map.
  2. U.S.: Total confirmed cases as of 7:30 p.m. ET: 7,074,155 — Total deaths: 204,461 — Total recoveries: 2,750,459 — Total tests: 100,492,536Map.
  3. States: New York daily cases top 1,000 for first time since June — U.S. reports over 55,000 new coronavirus cases.
  4. Health: The long-term pain of the mental health pandemicFewer than 10% of Americans have coronavirus antibodies.
  5. Business: Millions start new businesses in time of coronavirus.
  6. Education: Summer college enrollment offers a glimpse of COVID-19's effect.
Updated 2 hours ago - Politics & Policy

What they're saying: Trump nominates Amy Coney Barrett for Supreme Court

Judge Amy Coney Barrett in the Rose Garden of the White House on Sept. 26. Photo: Oliver Douliery/AFP via Getty Images

Democratic and Republican lawmakers along with other leading political figures reacted to President Trump's Saturday afternoon nomination of federal appeals court Judge Amy Coney Barrett to succeed Justice Ruth Bader Ginsburg on the Supreme Court.

What they're saying: "President Trump could not have made a better decision," Senate Majority Leader Mitch McConnell said in a statement. "Judge Amy Coney Barrett is an exceptionally impressive jurist and an exceedingly well-qualified nominee to the Supreme Court of the United States."

Amy Coney Barrett: "Should I be confirmed, I will be mindful of who came before me"

Trump introduces Amy Coney Barrett as nominee to replace Ruth Bader Ginsburg. Photo: Olivier Douleiry/Getty Images

In speaking after President Trump announced her as the Supreme Court nominee to replaced Ruth Bader Ginsburg, Circuit Court Judge Amy Coney Barrett said on Saturday she will be "mindful" of those who came before her on the court if confirmed.

What she's saying: Barrett touched on Ginsburg's legacy, as well as her own judicial philosophy and family values. "I love the United States and I love the United States Constitution," she said. "I'm truly humbled at the prospect of serving on the  Supreme Court."