Cobalt Strike Hackers Heaven
Popular penetration testing program Cobalt Strike saw a 161% increase in malicious use from 2019 to 2020 and is considered a high-volume threat for 2021.The tool is increasingly being used…
PurpleFox 2.0
An upgraded variant of Purple Fox malware with worm capabilities is being deployed in an attack campaign that is rapidly expanding.Purple Fox is now being spread through "indiscriminate port scanning…
Ransomware TTP
Some of the tactics, techniques and procedures being widely used by ransomware operators in their efforts that organizations should monitor: AdFind: This command-line Active Directory tool gets employed - like…
Posted incloudsecurity
SuperNova WebShell aftermath Solarwinds
As forensic evidence is slowly being unearthed in the aftermath of the SolarWinds supply chain attack, security researchers have discovered a second threat actor that has exploited the SolarWinds software…
Cobalt Strikes MS Teams
Ransomware operators are using malicious fake ads for Microsoft Teams updates to infect systems with backdoors that deployed Cobalt Strike to compromise the rest of the network. The attacks target…
Lokibit alert on high
LokiBot is an information stealer that comes with a range of built-in capabilities to extract information from different applications and files. The malware was first spotted in mid-2010 when it…