ElectricFish.Tunneling.Tool
Description
This indicates an attempt to use ElectricFish tunneling tool.
ElectricFish is a malicious Windows executable that's related to Hidden Cobra - North Korean Malicious Cyber Activity. This application's primary purpose is to tunnel traffic between two IP addresses.
Affected Products
Any unprotected Windows system is vulnerable.
Impact
Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems
Recommended Actions
The signature can be set to "Block" to block the malware's communication.
Please use Anti-Virus software to scan and clean the computer.
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |