Nina Kovacs — Exploit Research Analyst Key TakeawaysAnalysis of malicious Office macros reveals a sophisticated phishing campaign targeting enterprises.Malware deployment leveraged T1193 – Spear Phishing Link and T1203 – Exploitation for Client Execution techniques.Indicators of…
Nina Kovacs — Exploit Research Analyst Key TakeawaysAPT28 leveraged spear-phishing campaigns to gain initial access to targeted organizations.The implant utilized various Persistence mechanisms to maintain foothold within compromised environments.Exfiltration was achieved through Command and Control…
Nina Kovacs — Exploit Research Analyst Key TakeawaysXYZ Ransomware utilizes phishing emails as the initial access vector, leveraging social engineering techniques to prey on unsuspecting users.The malware implements various persistence mechanisms, including scheduled tasks and…
Nina Kovacs — Exploit Research Analyst Key TakeawaysAPT39 employs sophisticated phishing tactics to gain initial access.Utilizes custom malware samples designed to evade detection.Persistent Command and Control (C2) infrastructure leveraging domain generation algorithms.Executive SummaryOur investigation into…
Nina Kovacs — Exploit Research Analyst Key TakeawaysHealthcare organizations are increasingly targeted due to their critical data and vulnerability.The attack utilized a sophisticated phishing campaign as an initial access vector.Indicators of compromise (IOCs) included specific…
Nina Kovacs — Exploit Research Analyst Key TakeawaysThe XYZ malware employs sophisticated evasion techniques, utilizing T1040 to maintain persistence.Command and Control (C2) communications are established via T1071, leveraging HTTP traffic to blend seamlessly into normal…
Nina Kovacs — Exploit Research Analyst Key TakeawaysThe REMCOM malware utilizes advanced evasion techniques, including process injection and encrypted traffic to its C2 server.Initial access is often achieved through spear-phishing emails containing malicious attachments, leveraging…
Nina Kovacs — Exploit Research Analyst Key TakeawaysEmotet's persistence and modular structure make it a formidable threat in the malware landscape.The attack leverages phishing emails tailored with malicious links, showcasing social engineering tactics.Detection measures require…
Nina Kovacs — Exploit Research Analyst Key Takeaways The actor utilized phishing emails to deliver a malicious Excel document, exploiting the victim's trust.Persistence was achieved through the creation of scheduled tasks and modification of registry…
James Calloway — Threat Hunter Key TakeawaysLokiBot leverages both phishing and exploit-based initial access methods to deploy its payloads.Persistent mechanisms include registry modifications and scheduled tasks, aiding long-term stealth.The tool employs complex C2 communication patterns…