Mysterious 'Sandman' APT Targets Telecom Sector With Novel Backdoor

"Sandman" is a group of unknown origin that surfaced mirage-like in August. Researchers at SentinelOne are tracking the backdoor as "LuaDream" after observing it in attacks on telecommunications companies in the Middle East, Western Europe, and South Asia. The malware is highly modular with an array of functions for stealing system and user information.