evasion tactics - Cloud Security Alliance News Clipping Site

Cisco Talos Blog: New PXA Stealer targets government and education sectors for sensitive information

Nov 14, 2024

—

by

Source URL: https://blog.talosintelligence.com/new-pxa-stealer/ Source: Cisco Talos Blog Title: New PXA Stealer targets government and education sectors for sensitive information Feedly Summary: Cisco Talos discovered a new information stealing campaign operated by a Vietnamese-speaking threat actor targeting government and education entities in Europe and Asia. AI Summary and Description: Yes Summary: The text discusses a threat…

Cisco Talos Blog: Talos IR trends Q3 2024: Identity-based operations loom large

Oct 24, 2024

—

by

system automation

in Uncategorized

Source URL: https://blog.talosintelligence.com/incident-response-trends-q3-2024/ Source: Cisco Talos Blog Title: Talos IR trends Q3 2024: Identity-based operations loom large Feedly Summary: Credential theft was the main goal in 25% of incidents last quarter, and new ransomware variants made their appearance – read more about the top trends, TTPs, and security weaknesses that facilitated adversary actions. AI Summary…

The Register: Pixel perfect Ghostpulse malware loader hides inside PNG image files

Oct 22, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.theregister.com/2024/10/22/ghostpulse_malware_loader_png/ Source: The Register Title: Pixel perfect Ghostpulse malware loader hides inside PNG image files Feedly Summary: Miscreants combine it with an equally tricky piece of social engineering The Ghostpulse malware strain now retrieves its main payload via a PNG image file’s pixels. This development, security experts say, is “one of the most…

Wired: The FBI Made a Crypto Coin Just to Catch Fraudsters

Oct 12, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.wired.com/story/fbi-cryptocurrency-pump-and-dump/ Source: Wired Title: The FBI Made a Crypto Coin Just to Catch Fraudsters Feedly Summary: Plus: New details emerge in the National Public Data breach, Discord gets blocked in Russia and Turkey over alleged illegal activity on the platform, and more. AI Summary and Description: Yes Summary: The text covers significant incidents…

Microsoft Security Blog: File hosting services misused for identity phishing

Oct 9, 2024

—

by

system automation

in Uncategorized

Source URL: https://www.microsoft.com/en-us/security/blog/2024/10/08/file-hosting-services-misused-for-identity-phishing/ Source: Microsoft Security Blog Title: File hosting services misused for identity phishing Feedly Summary: Since mid-April 2024, Microsoft has observed an increase in defense evasion tactics used in campaigns abusing file hosting services like SharePoint, OneDrive, and Dropbox. These campaigns use sophisticated techniques to perform social engineering, evade detection, and compromise identities,…

Cloud Blog: Staying a Step Ahead: Mitigating the DPRK IT Worker Threat

Sep 23, 2024

—

by

system automation

in Uncategorized

Source URL: https://cloud.google.com/blog/topics/threat-intelligence/mitigating-dprk-it-worker-threat/ Source: Cloud Blog Title: Staying a Step Ahead: Mitigating the DPRK IT Worker Threat Feedly Summary: Written by: Codi Starks, Michael Barnhart, Taylor Long, Mike Lombardi, Joseph Pisano, Alice Revelli Strategic Overview of IT Workers Since 2022, Mandiant has tracked and reported on IT workers operating on behalf of the Democratic People’s…

Tag: evasion tactics

Cisco Talos Blog: New PXA Stealer targets government and education sectors for sensitive information

Cisco Talos Blog: Talos IR trends Q3 2024: Identity-based operations loom large

The Register: Pixel perfect Ghostpulse malware loader hides inside PNG image files

Wired: The FBI Made a Crypto Coin Just to Catch Fraudsters

Microsoft Security Blog: File hosting services misused for identity phishing

Cloud Blog: Staying a Step Ahead: Mitigating the DPRK IT Worker Threat