Thai Police Systems Under Fire From ‘Yokai’ Backdoor

Hackers are targeting Thai law enforcement with a new malware, “Yokai,” disguised as official US government documents. The attack chain uses legitimate Windows utilities to deliver Yokai, which can steal data and download additional malware. While Yokai incorporates sophisticated elements like structured C2 communications, it also exhibits amateurish flaws, such as self-replication that can lead to system slowdowns.

*****
Written on