Cyber Espionage Tool Regin Discovered By Symantec

Symantec, the parent company of Norton, has uncovered a highly-complex cyber-espionage malware program known as Regin. This malware has been developed for use in spying campaigns against international targets, such as government organizations, businesses, academic organizations, service providers and even private individuals. Because of its high degree of sophistication, Regin exhibits the characteristics of a state-sponsored operation, but, at this time, Symantec does not have enough evidence to connect it to any particular organization.

What Does Regin Do?

Classified as a backdoor Trojan, Regin provides the attacker access to, and control of a targeted computer. But unlike most malware that is designed for one intended purpose, such as stealing specific types of data, Regin is used for long-term, broad collection of information, as well as continued monitoring of targeted organizations.

Can Regin Affect Me?

At this time, Symantec has only observed around 100 cases of infection in 10 countries and most consumers are unlikely to be affected.  While individual users could be targeted by Regin, these individuals are typically working in specialized areas of interest to the Regin operators.

We do not believe that Regin targets the average Norton customer, however, it is important to also note that Symantec has provided protection against Regin to its customers, including Norton branded security products, since December 2013.  Regin components are detected as Backdoor.Regin.

Stay protected from this threat:

We always recommend that consumers take steps to protect themselves, even if they are not the direct target of a specific attack. Best practices include;

1. NEVER open attachments or links from unknown senders via email, instant messages or social media.
2. Be sure that all of your computer’s software is up to date. This includes not only your computer’s operating system but common applications such as document readers and productivity software.
3. Have a trusted brand of security software installed and keep it updated as well. While there are many good brands of software available, we happen to recommend Norton Security.