In the sample examined by ESET, a tool linked with the Winnti Group that obfuscates code was combined with an implant that has been attributed to Equation Group. (Getty)
A screenshot of World Wired Labs’s website. The “company” has been selling access to a trojan that is similar to one used by Winnti Group. (Greg Otto/Scoop News Group)