topic Re: ShroudedSnooper targets security components of Palo Alto Networks Cortex XDR in Cortex XDR Discussions

ShroudedSnooper targets security components of Palo Alto Networks Cortex XDR

Shahwaz_Md — Wed, 20 Sep 2023 11:23:36 GMT

Hi All.

There is a malware that is targeting the components of Cortex XDR, I checked the security advisories page from Palo Alto but did not find anything related to it.

Can someone help me find out if there's anything from PA regarding the same and how it has impacted and how we can be safe from it.

Hackers backdoor telecom providers with new HTTPSnoop malware (bleepingcomputer.com)

Regards,

Shahwaz

Re: ShroudedSnooper targets security components of Palo Alto Networks Cortex XDR

aspatil — Wed, 20 Sep 2023 16:11:49 GMT

Hello Shahwaz,

There is no product vulnerability associated with the ShroudedSnooper malware. ShroudedSnooper simply masquerades as legitimate security software like Cortex XDR. As a fix, The copycat aspects of the malware will be prevented.

There is no action required from your side, as malware is blocked by Cortex XDR, XSIAM and WildFire.