Alex Morgan — Threat Intelligence Analyst Key TakeawaysAPT34 leverages social engineering to gain initial access through spear-phishing emails.The malware employed demonstrated advanced persistence mechanisms, including registry modifications and scheduled tasks.Command and Control communications were primarily…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRecent phishing attacks utilized custom-built Remote Access Trojans (RATs) to compromise financial institutions.Indicators of Compromise (IOCs) included unique email addresses and malicious URLs used in the…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysNew malware variant employs sophisticated obfuscation techniques to evade detection.Initial access primarily achieved through phishing emails leading to a malicious document download.Command and Control (C2) communications…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRansomware deployment observed via spear-phishing tactics exploiting known vulnerabilities.The actor maintained persistence through multiple methods, including registry keys and scheduled tasks.Command and Control (C2) communications effectively…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe threat actor leveraged a spear-phishing campaign to gain initial access to the network.Malware persistence was achieved through scheduled tasks and registry modifications.Command and control communications…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysEmotet campaigns utilize malicious documents to lure victims, often employing social engineering tactics.Our analysis revealed that the actor employs the T1193 – Spear Phishing Link technique…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysZloader employs sophisticated techniques for initial access, leveraging phishing and malicious attachments to execute its payload.Once executed, Zloader establishes persistence through various methods, including registry manipulations…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysXYZ ransomware demonstrated advanced evasion techniques, utilizing legitimate system tools for execution.The actor leveraged phishing emails to achieve initial access, followed by a rapid deployment of…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysSupply chain compromises are leveraging social engineering techniques for initial access.This attack utilizes a custom implant capable of evading typical detection mechanisms.Indicators of Compromise (IOCs) include…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe actor behind the recent APT39 campaign utilized sophisticated obfuscation techniques to bypass traditional security measures.Initial access was achieved through spear-phishing emails that leveraged social engineering…