Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe malware employs advanced evasion techniques to bypass traditional security measures.Command and Control traffic is obscured using domain generation algorithms to maintain persistence.Lateral movement was achieved through harvested…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe ‘Panda’ malware campaign demonstrates advanced evasion techniques and multi-staged delivery mechanisms.Our analysis revealed that the malware employs multiple persistence strategies, including the modification of registry keys and…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe campaign utilized spear-phishing emails as the primary vector for initial access.Persistence mechanisms leveraged Windows Task Scheduler and misleading naming conventions.Command and Control (C2) communications were obscured through…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe actor employed a phishing campaign to deliver a custom ransomware payload.Our analysis revealed the use of T1059.001 – PowerShell for initial execution.Indicators of compromise (IOCs) included malicious…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysAPT34 leverages social engineering to gain initial access through spear-phishing emails.The malware employed demonstrated advanced persistence mechanisms, including registry modifications and scheduled tasks.Command and Control communications were primarily…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRecent phishing attacks utilized custom-built Remote Access Trojans (RATs) to compromise financial institutions.Indicators of Compromise (IOCs) included unique email addresses and malicious URLs used in the…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysNew malware variant employs sophisticated obfuscation techniques to evade detection.Initial access primarily achieved through phishing emails leading to a malicious document download.Command and Control (C2) communications…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRansomware deployment observed via spear-phishing tactics exploiting known vulnerabilities.The actor maintained persistence through multiple methods, including registry keys and scheduled tasks.Command and Control (C2) communications effectively…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe threat actor leveraged a spear-phishing campaign to gain initial access to the network.Malware persistence was achieved through scheduled tasks and registry modifications.Command and control communications…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysEmotet campaigns utilize malicious documents to lure victims, often employing social engineering tactics.Our analysis revealed that the actor employs the T1193 – Spear Phishing Link technique…