New 'HrServ.dll' Web Shell Detected in APT Attack Targeting Afghan Government

A new web shell called HrServ.dll has been detected in an APT attack targeting a government entity in Afghanistan. The web shell exhibits sophisticated features and is likely financially motivated. The attack involves the use of a remote administration tool and the creation of a scheduled task.