More than just a “loader” that delivers malicious code, Valak can also be used to siphon off data from enterprise networks.
Investigators earlier this year uncovered evidence of the hackers’ “longstanding compromises” at unnamed companies, according to a confidential memo.
Fresenius Group, a health care conglomerate that includes a major pharmaceutical firm, said the incident affected some of its production.
The court handles criminal and terrorism cases with sensitive witness lists.
Parent company Rheinmetall Group said it expects to lose 3 to 4 million euros per week, starting next week.
DanaBot is being used to hit German retail websites, including H&M, according to new research from Webroot.