Alex Morgan — Threat Intelligence Analyst Key TakeawaysA phishing campaign targeting financial institutions utilized a malware-as-a-service model to deploy advanced payloads.The actor leveraged Phishing tactics to achieve initial access, primarily via email attachments.Command and Control…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysPhishing emails were utilized to achieve initial access, leveraging social engineering principles to deceive targets.The malware deployed included a dropper that installed a ransomware payload, indicating a multi-stage…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysAttackers leveraged phishing emails to distribute Emotet, allowing initial access to target networks.Post-infection, TrickBot was used to establish persistence and lateral movement across the environment.The threat actor's ultimate…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysXYZ malware uses sophisticated phishing techniques for initial access.Persistence mechanisms involve registry manipulation to ensure longevity.Lateral movement is achieved through exploiting SMB vulnerabilities within the network.Executive SummaryDuring our…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysABC threat actor leverages Cobalt Strike to establish initial access and maintain persistence within the target environment.The malware employs sophisticated techniques for lateral movement and data exfiltration, utilizing…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysEmotet continues to leverage living-off-the-land tactics, utilizing existing software like PowerShell for execution.The actor demonstrates advanced obfuscation techniques to evade detection, including encrypted payloads and multi-stage delivery mechanisms.Command…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe recent PHISHER malware campaign demonstrates advanced tactics for initial access through social engineering.Our analysis revealed the use of T1059.001 – Command and Scripting Interpreter: PowerShell for execution…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysAdvanced phishing campaigns employed social engineering tactics to lure users into credential harvesting.Malware variants observed include a dropper that executes a secondary payload for establishing persistence.Command and Control…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysRecent phishing campaigns utilize sophisticated social engineering to deliver **Remote Access Trojans (RATs)**.Malware deployment was traced to the use of legitimate-looking documents and **malicious macros**.Command and Control (C2)…
Alex Morgan — Threat Intelligence Analyst Key TakeawaysDridex has evolved to implement advanced evasion techniques, including polymorphism and encrypted payloads.Command and Control activities utilize a newly observed domain generation algorithm (DGA) to evade detection.The malware…