NishMath

References :

• CYBER GEEKS: This blog post provides a detailed technical explanation of the call stack spoofing technique used by APT41.
• malware.news: Malware News article about call stack spoofing
• labs.withsecure.com: WithSecure Labs publication on call stack spoofing
• attack.mitre.org: A MITRE ATT&CK page about the call stack spoofing technique

Classification:

• HashTags: #CallStackSpoofing #APT41 #Malware
• Attacker: APT41
• Malware: Dodgebox
• Type: Malware
• Severity: Medium