FireEye recently reported that a sophisticated threat actor had been found targeting the Oracle Solaris operating systems. This is going on for over two years now – including an exploit for a zero-day vulnerability.
The vulnerability has been tracked as UNC1945 — UNC, which is an uncategorized group. The attacker was observed to compromise telecommunications firms while leveraging third-party networks. This helps in targeting certain financial and professional consulting sectors.
Throughout the observation, the researchers noted that the group used different tools to compromise Solaris, Windows, and Linux operating systems. Besides, it compromised custom virtual machines and advanced technical abilities while carrying out interactive operations.