Researchers at Kaspersky Lab have discovered a new, highly sophisticated advanced persistent threat (APT) framework. Malware samples associated with the APT reveal a complex never-before-seen code base, making it extremely hard to detect. Developers of the framework have gone to great lengths to keep it undetected. TajMahal was given to the group because thats the name the attackers gave an XML file used for data exfiltration. The framework includes backdoors, loaders, orchestrators, C2 communicators, audio recorders, keyloggers, screen and webcam grabbers, documents and cryptography key stealers.”]

