SHELBY

SHELBY is a sophisticated backdoor malware family that abuses GitHub for command-and-control operations. It consists of two main components: SHELBYLOADER and SHELBYC2. The malware employs advanced sandbox detection techniques, uses obfuscation with Obfuscar, and establishes persistence through Windows Registry. It targets telecommunications companies and airports, particularly in Iraq and UAE regions.