Thousands of U.K. business computers have been infected by espionage malware using a custom protocol to communicate with its command and control servers. Researchers at Israeli security company Seculert said the malware is still percolating with a number of capabilities yet to be deployed. The custom protocol has another unique element to it, in that it always initiates communication with a command that includes the string some_magic_code1 as an authenticator. The malware is capable of stealing data from compromised machines, enabling remote access for the attackers and hijacking Web browsing sessions.
Source: https://threatpost.com/magic-espionage-malware-hits-thousands-of-uk-computers/99813/

