Too Log; Didn't Read — Unknown Actor Using CLFS Log Files for Stealth

Mandiant discovered a new malware family that was named PRIVATELOG and its installer, STASHLOG. It uses a novel and especially interesting technique the samples use to hide data.