Cybersecurity incident — 2019-04-25 00:00:00
Affected organization: Undisclosed financial institution
Affected country: Undetermined
Industry: Finance and Insurance
Event type: Exploitive
Event subtype: Exploitation of Application Server,Exploitation of End Hosts
Motive: Financial
Actor: TA505
Actor type: Criminal
Actor country: Undetermined

Researchers from Cybereason discover a spear phishing campaign targeting a financial institution, and installing a sophisticated backdoor called ServHelper to take over the network.