Symantec Discovers New “Reign” Malware Used Since 2008

📅 November 24, 2014 - A new malware has been discovered that has been used to spy on governments, businesses, researchers, and private companies since 2008.

Security firm Symantec, who discovered the malware known as Regin, says it is a “complex piece of malware whose structure displays a degree of technical competence rarely seen.”

“Reign is a multi-stages threat and each stage is hidden and encrypted, with the exception of the first stage,” says the company via blog post. “Executing the first stage starts a domino chain of decryption and loading of each subsequent stage for a total of five stages. Each individual stage provides little information on the complete package. Only by acquiring all five stages is it possible to analyze and understand the threat.”

Symantec notes that almost half of the infections affected private individuals and small businesses, with 28 percent targeting telecom companies in order to gain access to users private calls. Other targets include those in hospitality, energy, airline, and research.

The malware was removed in 2011, though a new version resurfaced in 2013 where it is still currently used today