Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe campaign utilized spear-phishing emails as the primary vector for initial access.Persistence mechanisms leveraged Windows Task Scheduler and misleading naming conventions.Command and Control (C2) communications were obscured through…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe actor employed a phishing campaign to deliver a custom ransomware payload.Our analysis revealed the use of T1059.001 – PowerShell for initial execution.Indicators of compromise (IOCs) included malicious…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysAPT34 leverages social engineering to gain initial access through spear-phishing emails.The malware employed demonstrated advanced persistence mechanisms, including registry modifications and scheduled tasks.Command and Control communications were primarily…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRecent phishing attacks utilized custom-built Remote Access Trojans (RATs) to compromise financial institutions.Indicators of Compromise (IOCs) included unique email addresses and malicious URLs used in the…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysNew malware variant employs sophisticated obfuscation techniques to evade detection.Initial access primarily achieved through phishing emails leading to a malicious document download.Command and Control (C2) communications…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysRansomware deployment observed via spear-phishing tactics exploiting known vulnerabilities.The actor maintained persistence through multiple methods, including registry keys and scheduled tasks.Command and Control (C2) communications effectively…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysThe threat actor leveraged a spear-phishing campaign to gain initial access to the network.Malware persistence was achieved through scheduled tasks and registry modifications.Command and control communications…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysEmotet campaigns utilize malicious documents to lure victims, often employing social engineering tactics.Our analysis revealed that the actor employs the T1193 – Spear Phishing Link technique…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysZloader employs sophisticated techniques for initial access, leveraging phishing and malicious attachments to execute its payload.Once executed, Zloader establishes persistence through various methods, including registry manipulations…
Daniel Osei — SOC Lead & Malware Analyst Key TakeawaysXYZ ransomware demonstrated advanced evasion techniques, utilizing legitimate system tools for execution.The actor leveraged phishing emails to achieve initial access, followed by a rapid deployment of…