Tag: tactics

Source URL: https://blog.talosintelligence.com/talos-ir-trends-q4-2024/ Source: Cisco Talos Blog Title: Talos IR trends Q4 2024: Web shell usage and exploitation of public-facing applications spike Feedly Summary: This new report from Cisco Talos Incident Response explores how threat actors increasingly deployed web shells against vulnerable web applications, and exploited vulnerable or unpatched public-facing applications to gain initial access.…

Unit 42: CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia

Jan 29, 2025

—

by

Source URL: https://unit42.paloaltonetworks.com/?p=138128 Source: Unit 42 Title: CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia Feedly Summary: A Chinese-linked espionage campaign targeted entities in South Asia using rare techniques like DNS exfiltration, with the aim to steal sensitive data. The post CL-STA-0048: An Espionage Operation Against High-Value Targets in South Asia appeared first…

Hacker News: We got hit by an alarmingly well-prepared phish spammer

Jan 29, 2025

—

by

Source URL: https://utcc.utoronto.ca/~cks/space/blog/spam/WellPreparedPhishSpammer Source: Hacker News Title: We got hit by an alarmingly well-prepared phish spammer Feedly Summary: Comments AI Summary and Description: Yes Summary: The text highlights a sophisticated phishing attack where attackers exploited VPN access to send spam emails after compromising a user’s credentials. This incident underscores the importance of examining security practices…

The Register: Baguette bandits strike again with ransomware and a side of mockery

—

by

Source URL: https://www.theregister.com/2025/01/28/baguettes_bandits_strike_again/ Source: The Register Title: Baguette bandits strike again with ransomware and a side of mockery Feedly Summary: Big-game hunting to the extreme Hellcat, the ransomware crew that infected Schneider Electric and demanded $125,000 in baguettes, has aggressively targeted government, education, energy, and other critical industries since it emerged around mid-2024.… AI Summary…

The Register: DARPA asking for ideas on automating money laundering detection

—

by

Source URL: https://www.theregister.com/2025/01/28/darpa_auto_money_laundering_detection/ Source: The Register Title: DARPA asking for ideas on automating money laundering detection Feedly Summary: With all the AI hype swirling around, you’d think someone would’ve cracked this one already Tracking down and preventing money laundering is a slow, time-consuming, manual procedure. DARPA is hoping it can provide some relief for exhausted…

Cloud Blog: ScatterBrain: Unmasking the Shadow of PoisonPlug’s Obfuscator

—

by

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/scatterbrain-unmasking-poisonplug-obfuscator/ Source: Cloud Blog Title: ScatterBrain: Unmasking the Shadow of PoisonPlug’s Obfuscator Feedly Summary: Written by: Nino Isakovic Introduction Since 2022, Google Threat Intelligence Group (GTIG) has been tracking multiple cyber espionage operations conducted by China-nexus actors utilizing POISONPLUG.SHADOW. These operations employ a custom obfuscating compiler that we refer to as “ScatterBrain," facilitating…

Cisco Talos Blog: New TorNet backdoor seen in widespread campaign

—

by

Source URL: https://blog.talosintelligence.com/new-tornet-backdoor-campaign/ Source: Cisco Talos Blog Title: New TorNet backdoor seen in widespread campaign Feedly Summary: Cisco Talos discovered an ongoing malicious campaign operated by a financially motivated threat actor targeting users, predominantly in Poland and Germany. AI Summary and Description: Yes **Summary:** The text describes a sophisticated ongoing cyber campaign discovered by Cisco…

The Register: Google takes action after coder reports ‘most sophisticated attack I’ve ever seen’

Jan 27, 2025

—

by

Source URL: https://www.theregister.com/2025/01/27/google_confirms_action_taken_to/ Source: The Register Title: Google takes action after coder reports ‘most sophisticated attack I’ve ever seen’ Feedly Summary: Latest trope is tricky enough to fool even the technical crowd… almost Google says it’s now hardening defenses against a sophisticated account takeover scam documented by a programmer last week.… AI Summary and Description:…

Slashdot: DeepSeek Says Service Degraded Due To ‘Large-Scale Malicious Attack’

Jan 27, 2025

—

by