Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe ANOMALY malware campaign leverages phishing emails as its initial attack vector.Utilizes a multi-stage payload with Dropper and Payload components for execution.Exploits lateral movement via SMB and leverages…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysRecent malware analysis reveals sophisticated deployment techniques involving steganography and social engineering.Uncovered indicators of compromise (IOCs) point to a targeted actor leveraging custom payloads for persistence and lateral…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThis attack utilized a combination of spear-phishing and malicious document exploits to achieve initial access.The implant showcased multiple persistence mechanisms, including scheduled tasks and registry modifications.Command and Control…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe attack utilized a sophisticated email phishing campaign to initiate credential harvesting.Once inside the network, the threat actor leveraged T1569.002 – Container Deployment to deploy malicious containers for…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysA custom-built dropper is utilized to deliver the payload after initial access via phishing.The malware establishes a persistent C2 communication channel, enabling remote command execution.Lateral movement tactics employed…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysCustom phishing emails were the primary attack vector.Malicious payloads demonstrated advanced evasion techniques.Successful exploitation resulted in lateral movement across the network.Executive SummaryDuring our investigation into a recent phishing…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe malware employs advanced evasion techniques to bypass traditional security measures.Command and Control traffic is obscured using domain generation algorithms to maintain persistence.Lateral movement was achieved through harvested…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe ‘Panda’ malware campaign demonstrates advanced evasion techniques and multi-staged delivery mechanisms.Our analysis revealed that the malware employs multiple persistence strategies, including the modification of registry keys and…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe campaign utilized spear-phishing emails as the primary vector for initial access.Persistence mechanisms leveraged Windows Task Scheduler and misleading naming conventions.Command and Control (C2) communications were obscured through…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe actor employed a phishing campaign to deliver a custom ransomware payload.Our analysis revealed the use of T1059.001 – PowerShell for initial execution.Indicators of compromise (IOCs) included malicious…