Israeli Entities Under Siege: Supposed Grasshopper Cyber Attack Unveiled

Cybersecurity researchers have uncovered a campaign, dubbed Supposed Grasshopper, targeting Israeli entities with frameworks like Donut and Sliver. This highly targeted attack leverages custom WordPress sites as a payload delivery mechanism. The campaign’s end goal remains unknown, raising questions about potential legitimate penetration testing operations…

Hot Take:

Why do hackers love WordPress? Because it’s like the fast-food of the internet: quick, accessible, and full of loopholes! Now, Israeli entities are getting a taste of this not-so-happy meal with the ‘Supposed Grasshopper’ attack campaign. Bon appétit!

Key Points:

  • Supposed Grasshopper campaign targets Israeli entities with open-source frameworks like Donut and Sliver.
  • The attack uses custom WordPress websites as payload delivery mechanisms.
  • Nim-written downloader fetches second-stage malware via VHD files.
  • Second-stage payload includes Donut and Sliver, a Cobalt Strike alternative.
  • Potential ties to legitimate penetration testing operations raise transparency concerns.

Membership Required

 You must be a member to access this content.

View Membership Levels
Already a member? Log in here