Search cyberveille.decio.ch

The SessionManager IIS backdoor: a possibly overlooked GELSEMIUM artefact

In early 2022, we investigated an IIS backdoor called SessionManager. It has been used against NGOs, government, military and industrial organizations in Africa, South America, Asia, Europe, Russia and the Middle East.

#securelist #EN #2022 #APT #Backdoor #Malware #Microsoft #Exchange #Targeted #IIS-attacks #Vulnerabilities #GELSEMIUM

·securelist.com·Jun 30, 2022

The SessionManager IIS backdoor: a possibly overlooked GELSEMIUM artefact

Conti vs. LockBit: A Comparative Analysis of Ransomware Groups

We compare the targeting and business models of the Conti and LockBit ransomware groups using data analysis approaches. This will be presented in full at the 34th Annual FIRST Conference on June 27, 2022.

#trendmicro #EN #2022 #Conti #Lockbit #malware #cyber-crime #research #cyber-threats #endpoints #ransomware #articles #news #reports

·trendmicro.com·Jun 28, 2022

Conti vs. LockBit: A Comparative Analysis of Ransomware Groups

We compare the targeting and business models of the Conti and LockBit ransomware groups using data analysis approaches. This will be presented in full at the 34th Annual FIRST Conference on June 27, 2022.

#trendmicro #EN #2022 #Conti #Lockbit #malware #cyber-crime #research #cyber-threats #endpoints #ransomware #articles #news #reports

·trendmicro.com·Jun 28, 2022

Conti vs. LockBit: A Comparative Analysis of Ransomware Groups

We compare the targeting and business models of the Conti and LockBit ransomware groups using data analysis approaches. This will be presented in full at the 34th Annual FIRST Conference on June 27, 2022.

#trendmicro #EN #2022 #Conti #Lockbit #malware #cyber-crime #research #cyber-threats #endpoints #ransomware #articles #news #reports

·trendmicro.com·Jun 28, 2022

Conti vs. LockBit: A Comparative Analysis of Ransomware Groups

There Is More Than One Way to Sleep: Dive Deep Into the Implementations of API Hammering by Various Malware Families

Learn about the unique implementations of API Hammering malware samples and how to mitigate them.

#unit42 #API #Hammering #EN #2022 #malware #API-Hammering #Zloader #BazarLoader

·unit42.paloaltonetworks.com·Jun 26, 2022

There Is More Than One Way to Sleep: Dive Deep Into the Implementations of API Hammering by Various Malware Families

Learn about the unique implementations of API Hammering malware samples and how to mitigate them.

#unit42 #API #Hammering #EN #2022 #malware #API-Hammering #Zloader #BazarLoader

·unit42.paloaltonetworks.com·Jun 26, 2022

There Is More Than One Way to Sleep: Dive Deep Into the Implementations of API Hammering by Various Malware Families

Learn about the unique implementations of API Hammering malware samples and how to mitigate them.

#unit42 #API #Hammering #EN #2022 #malware #API-Hammering #Zloader #BazarLoader

·unit42.paloaltonetworks.com·Jun 26, 2022

There Is More Than One Way to Sleep: Dive Deep Into the Implementations of API Hammering by Various Malware Families

BRATA is evolving into an Advanced Persistent Threat

Here we go with another episode about our (not so) old friend, BRATA. In almost one year, threat actors (TAs) have further improved the capabilities of this malware. In our previous blog post [1] we defined three main BRATA variants, which appeared during two different waves detected by our telemetries at the very end of 2021. However, during the last months we have observed a change in the attack pattern commonly used.

#cleafy #2022 #EN #malware #BRATA #APT #phishing #analysis #IOCs #banker

·cleafy.com·Jun 20, 2022

BRATA is evolving into an Advanced Persistent Threat

Here we go with another episode about our (not so) old friend, BRATA. In almost one year, threat actors (TAs) have further improved the capabilities of this malware. In our previous blog post [1] we defined three main BRATA variants, which appeared during two different waves detected by our telemetries at the very end of 2021. However, during the last months we have observed a change in the attack pattern commonly used.

#cleafy #2022 #EN #malware #BRATA #APT #phishing #analysis #IOCs #banker

·cleafy.com·Jun 20, 2022

BRATA is evolving into an Advanced Persistent Threat

Here we go with another episode about our (not so) old friend, BRATA. In almost one year, threat actors (TAs) have further improved the capabilities of this malware. In our previous blog post [1] we defined three main BRATA variants, which appeared during two different waves detected by our telemetries at the very end of 2021. However, during the last months we have observed a change in the attack pattern commonly used.

#cleafy #2022 #EN #malware #BRATA #APT #phishing #analysis #IOCs #banker

·cleafy.com·Jun 20, 2022

BRATA is evolving into an Advanced Persistent Threat

Here we go with another episode about our (not so) old friend, BRATA. In almost one year, threat actors (TAs) have further improved the capabilities of this malware. In our previous blog post [1] we defined three main BRATA variants, which appeared during two different waves detected by our telemetries at the very end of 2021. However, during the last months we have observed a change in the attack pattern commonly used.

#cleafy #2022 #EN #malware #BRATA #APT #phishing #analysis #IOCs #banker

·cleafy.com·Jun 20, 2022

BRATA is evolving into an Advanced Persistent Threat

Here we go with another episode about our (not so) old friend, BRATA. In almost one year, threat actors (TAs) have further improved the capabilities of this malware. In our previous blog post [1] we defined three main BRATA variants, which appeared during two different waves detected by our telemetries at the very end of 2021. However, during the last months we have observed a change in the attack pattern commonly used.

#cleafy #2022 #EN #malware #BRATA #APT #phishing #analysis #IOCs #banker

·cleafy.com·Jun 20, 2022

BRATA is evolving into an Advanced Persistent Threat

Here we go with another episode about our (not so) old friend, BRATA. In almost one year, threat actors (TAs) have further improved the capabilities of this malware. In our previous blog post [1] we defined three main BRATA variants, which appeared during two different waves detected by our telemetries at the very end of 2021. However, during the last months we have observed a change in the attack pattern commonly used.

#cleafy #2022 #EN #malware #BRATA #APT #phishing #analysis #IOCs #banker

·cleafy.com·Jun 20, 2022

BRATA is evolving into an Advanced Persistent Threat

Here we go with another episode about our (not so) old friend, BRATA. In almost one year, threat actors (TAs) have further improved the capabilities of this malware. In our previous blog post [1] we defined three main BRATA variants, which appeared during two different waves detected by our telemetries at the very end of 2021. However, during the last months we have observed a change in the attack pattern commonly used.

#cleafy #2022 #EN #malware #BRATA #APT #phishing #analysis #IOCs #banker

·cleafy.com·Jun 20, 2022

BRATA is evolving into an Advanced Persistent Threat

Here we go with another episode about our (not so) old friend, BRATA. In almost one year, threat actors (TAs) have further improved the capabilities of this malware. In our previous blog post [1] we defined three main BRATA variants, which appeared during two different waves detected by our telemetries at the very end of 2021. However, during the last months we have observed a change in the attack pattern commonly used.

#cleafy #2022 #EN #malware #BRATA #APT #phishing #analysis #IOCs #banker

·cleafy.com·Jun 20, 2022

BRATA is evolving into an Advanced Persistent Threat

Here we go with another episode about our (not so) old friend, BRATA. In almost one year, threat actors (TAs) have further improved the capabilities of this malware. In our previous blog post [1] we defined three main BRATA variants, which appeared during two different waves detected by our telemetries at the very end of 2021. However, during the last months we have observed a change in the attack pattern commonly used.

#cleafy #2022 #EN #malware #BRATA #APT #phishing #analysis #IOCs #banker

·cleafy.com·Jun 20, 2022

BRATA is evolving into an Advanced Persistent Threat

Here we go with another episode about our (not so) old friend, BRATA. In almost one year, threat actors (TAs) have further improved the capabilities of this malware. In our previous blog post [1] we defined three main BRATA variants, which appeared during two different waves detected by our telemetries at the very end of 2021. However, during the last months we have observed a change in the attack pattern commonly used.

#cleafy #2022 #EN #malware #BRATA #APT #phishing #analysis #IOCs #banker

·cleafy.com·Jun 20, 2022

BRATA is evolving into an Advanced Persistent Threat

Police Linked to Hacking Campaign to Frame Indian Activists

New details connect police in India to a plot to plant evidence on victims' computers that led to their arrest.

#Wired #en #2022 #crime #malware #hacking #India #police #spyware #activists

·wired.com·Jun 16, 2022

Police Linked to Hacking Campaign to Frame Indian Activists

New details connect police in India to a plot to plant evidence on victims' computers that led to their arrest.

#Wired #en #2022 #crime #malware #hacking #India #police #spyware #activists

·wired.com·Jun 16, 2022

Police Linked to Hacking Campaign to Frame Indian Activists

New details connect police in India to a plot to plant evidence on victims' computers that led to their arrest.

#Wired #en #2022 #crime #malware #hacking #India #police #spyware #activists

·wired.com·Jun 16, 2022

Police Linked to Hacking Campaign to Frame Indian Activists

Linux Threat Hunting: 'Syslogk' a kernel rootkit found under development in the wild

Introduction Rootkits are dangerous pieces of malware. Once in place, they are usually really hard to detect. Their code is typically more challenging to write than other malware, so developers resort to code reuse from open source projects. As rootkits are very interesting to analyze, we are always looking out for these kinds of samples […]

#avast #EN #2022 #Rootkit #Linux #Syslogk #malware #Adore-Ng