During the analysis, several initial indicators point toward Russia-based threat actors, including:
- Deputy Loader and Sheriff Downloader contain Russian language resources;
- Russian locale used by the Dropbox account; and,
- Targeting…
Article Source
https://www.ibm.com/think/news/x-force-discovers-new-sheriff-backdoor-target-ukraine