Tag: stealth
- 
		
		
		Microsoft Security Blog: StilachiRAT analysis: From system reconnaissance to cryptocurrency theftSource URL: https://www.microsoft.com/en-us/security/blog/2025/03/17/stilachirat-analysis-from-system-reconnaissance-to-cryptocurrency-theft/ Source: Microsoft Security Blog Title: StilachiRAT analysis: From system reconnaissance to cryptocurrency theft Feedly Summary: Microsoft Incident Response uncovered a novel remote access trojan (RAT) named StilachiRAT, which demonstrates sophisticated techniques to evade detection, persist in the target environment, and exfiltrate sensitive data. This blog primarily focuses on analysis of the WWStartupCtrl64.dll… 
- 
		
		
		Cloud Blog: Streamlined Security: Introducing Network Security IntegrationSource URL: https://cloud.google.com/blog/products/networking/introducing-network-security-integration/ Source: Cloud Blog Title: Streamlined Security: Introducing Network Security Integration Feedly Summary: Many Google Cloud customers have deep investments in third-party ISV security solutions such as appliances to secure their networks and enforce consistent policies across multiple clouds. However, integrating these security solutions into the cloud application environment comes with its own… 
- 
		
		
		Unit 42: Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global OrganizationsSource URL: https://unit42.paloaltonetworks.com/?p=138415 Source: Unit 42 Title: Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations Feedly Summary: We analyze the backdoor Squidoor, used by a suspected Chinese threat actor to steal sensitive information. This multi-platform backdoor is built for stealth. The post Squidoor: Suspected Chinese Threat Actor’s Backdoor Targets Global Organizations appeared first on… 
- 
		
		
		Hacker News: Detecting AI Agent Use and AbuseSource URL: https://stytch.com/blog/detecting-ai-agent-use-abuse/ Source: Hacker News Title: Detecting AI Agent Use and Abuse Feedly Summary: Comments AI Summary and Description: Yes Summary: The text discusses the evolving capabilities of AI agents in web interaction, particularly how they mimic real users, which poses security risks for applications. It emphasizes the need for effective observability and detection… 
- 
		
		
		Microsoft Security Blog: The BadPilot campaign: Seashell Blizzard subgroup conducts multiyear global access operationSource URL: https://www.microsoft.com/en-us/security/blog/2025/02/12/the-badpilot-campaign-seashell-blizzard-subgroup-conducts-multiyear-global-access-operation/ Source: Microsoft Security Blog Title: The BadPilot campaign: Seashell Blizzard subgroup conducts multiyear global access operation Feedly Summary: Microsoft is publishing for the first time our research into a subgroup within the Russian state actor Seashell Blizzard and its multiyear initial access operation, tracked by Microsoft Threat Intelligence as the “BadPilot campaign”.… 
- 
		
		
		The Register: Russia’s Sandworm caught snarfing credentials, data from American and Brit orgsSource URL: https://www.theregister.com/2025/02/12/russias_sandworm_caught_stealing_credentials/ Source: The Register Title: Russia’s Sandworm caught snarfing credentials, data from American and Brit orgs Feedly Summary: ‘Near-global’ initial access campaign active since 2021 An initial-access subgroup of Russia’s Sandworm last year wriggled its way into networks within the US, UK, Canada and Australia, stealing credentials and data from “a limited number…