Unit 42 – Page 4 – Experimental News Clipping Site

Unit 42: Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis

Apr 16, 2025

—

by

Source URL: https://unit42.paloaltonetworks.com/phishing-campaign-with-complex-attack-chain/ Source: Unit 42 Title: Cascading Shadows: An Attack Chain Approach to Avoid Detection and Complicate Analysis Feedly Summary: Agent Tesla, Remcos RAT and XLoader delivered via a complex phishing campaign. Learn how attackers are using multi-stage delivery to hinder analysis. The post Cascading Shadows: An Attack Chain Approach to Avoid Detection and…

Unit 42: How Prompt Attacks Exploit GenAI and How to Fight Back

Apr 9, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/?p=139296 Source: Unit 42 Title: How Prompt Attacks Exploit GenAI and How to Fight Back Feedly Summary: GenAI boosts productivity but also poses security risks. Palo Alto Networks has a new whitepaper about prompt-based threats and how to defend against them. The post How Prompt Attacks Exploit GenAI and How to Fight Back…

Unit 42: OH-MY-DC: OIDC Misconfigurations in CI/CD

Apr 4, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/oidc-misconfigurations-in-ci-cd/ Source: Unit 42 Title: OH-MY-DC: OIDC Misconfigurations in CI/CD Feedly Summary: We found three key attack vectors in OpenID Connect (OIDC) implementation and usage. Bad actors could exploit these to access restricted resources. The post OH-MY-DC: OIDC Misconfigurations in CI/CD appeared first on Unit 42. AI Summary and Description: Yes Summary: The…

Unit 42: Evolution of Sophisticated Phishing Tactics: The QR Code Phenomenon

Apr 1, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/qr-code-phishing/ Source: Unit 42 Title: Evolution of Sophisticated Phishing Tactics: The QR Code Phenomenon Feedly Summary: Phishing with QR codes: New tactics described here include concealing links with redirects and using Cloudflare Turnstile to evade security crawlers. The post Evolution of Sophisticated Phishing Tactics: The QR Code Phenomenon appeared first on Unit 42.…

Unit 42: Cloud Threats on the Rise: Alert Trends Show Intensified Attacker Focus on IAM, Exfiltration

Mar 27, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/2025-cloud-security-alert-trends/ Source: Unit 42 Title: Cloud Threats on the Rise: Alert Trends Show Intensified Attacker Focus on IAM, Exfiltration Feedly Summary: Understanding trends amidst noise: tracking shifts in security alerts allows cloud defenders to parse threats from attackers targeting IAM, storage and more. The post Cloud Threats on the Rise: Alert Trends Show…

Unit 42: Threat Assessment: GitHub Actions Supply Chain Attack: The Compromise of tj-actions/changed-files

Mar 18, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/github-actions-supply-chain-attack/ Source: Unit 42 Title: Threat Assessment: GitHub Actions Supply Chain Attack: The Compromise of tj-actions/changed-files Feedly Summary: A compromise of the GitHub action tj-actions/changed-files highlights how attackers could exploit vulnerabilities in third-party actions to compromise supply chains. The post Threat Assessment: GitHub Actions Supply Chain Attack: The Compromise of tj-actions/changed-files appeared first…

Unit 42: Off the Beaten Path: Recent Unusual Malware

Mar 14, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/unusual-malware/ Source: Unit 42 Title: Off the Beaten Path: Recent Unusual Malware Feedly Summary: Three unusual malware samples analyzed here include an ISS backdoor developed in a rare language, a bootkit and a Windows implant of a post-exploit framework. The post Off the Beaten Path: Recent Unusual Malware appeared first on Unit 42.…

Unit 42: Investigating Scam Crypto Investment Platforms Using Pyramid Schemes to Defraud Victims

Mar 13, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/?p=138627 Source: Unit 42 Title: Investigating Scam Crypto Investment Platforms Using Pyramid Schemes to Defraud Victims Feedly Summary: We identified a campaign spreading thousands of sca crypto investment platforms through websites and mobile apps, possibly through a standardized toolkit. The post Investigating Scam Crypto Investment Platforms Using Pyramid Schemes to Defraud Victims appeared…

Threat Research Archives – Unit 42: RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector

Mar 10, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/macos-malware-targets-crypto-sector/ Source: Threat Research Archives – Unit 42 Title: RustDoor and Koi Stealer for macOS Used by North Korea-Linked Threat Actor to Target the Cryptocurrency Sector Feedly Summary: AI Summary and Description: Yes Summary: The text details a significant malware campaign targeting macOS systems, notably linked to North Korean nation-state actors employing advanced…

Threat Research Archives – Unit 42: Uncovering .NET Malware Obfuscated by Encryption and Virtualization

Mar 10, 2025

—

by

Kurt Seifried

in Uncategorized

Source URL: https://unit42.paloaltonetworks.com/malware-obfuscation-techniques/ Source: Threat Research Archives – Unit 42 Title: Uncovering .NET Malware Obfuscated by Encryption and Virtualization Feedly Summary: AI Summary and Description: Yes **Summary:** This article provides a detailed examination of sophisticated obfuscation techniques utilized by various malware families, specifically focusing on how these methods enhance the ability of malware to evade…

Tag: Unit 42