Hamas Hackers Employ Rust-based SysJoker Backdoor in Attacks

A new version of the multi-platform malware known as 'SysJoker' has emerged, featuring a complete code rewrite in the Rust programming language. Check Point has linked this new Rust-based variant to the Hamas-affiliated threat group 'Gaza Cybergang' and their previous cyber-attacks against Israel. The malware employs various evasion techniques, including random sleep intervals and custom encryption, and primarily serves as a backdoor to fetch and load additional payloads on compromised systems. While the attribution is not conclusive, similarities in tactics and techniques suggest a potential connection between SysJoker and 'Operation Electric Powder.'