TrendLabs Security Intelligence BlogIXESHE Derivative IHEATE Targets Users in America - TrendLabs Security Intelligence Blog

Trend Micro's TrendLabs report analyzes the IXESHE targeted attack campaign and its derivative IHEATE, describing its shift to targeting United States users, variations in C2 communication and encryption, and the backdoor command set and data exfiltration format; it also covers indicators such as the EMC112 tag, fake C&C addresses, and lists of affected domains, concluding that the IXESHE family remains active and evolving.