The researchers found the activity after an operator left a server exposed online. They said the agent assisted with reconnaissance, wrote a program to download and organize files, and prepared reports for its operators.

Reuters said Kazakh and Tajik officials did not immediately comment and it could not reach the group. The attribution and account of the operation therefore rest on CloudSek’s investigation.

Go to the source

This is an original summary, not a republication of the full report.

Read the original at Reuters ↗