Punishing Owl attacks Russia
Punishing Owl attacks Russia🦉 A new owl in the hacktivist forest 🎄 On the eve of the New Year, a number of Russian institutions received an unpleasant gift — a…
[ FEED // CHRONO // 267 ITEMS ]
ALL MATERIALS
Time to update.
Time to update ⚠️ In early December we already reported how hackers infiltrate infrastructure through unpatched vulnerabilities in the TrueConf server that admi…
Work order for malware operation
Work order for malware operation ✍️ In mid-January, the cyber intelligence group recorded a campaign by the hacker group XDSpy targeting organizations in Russia…
Cyber Threat Library: Basic Minimum or Luxurious Maximum?
Cyber Threat Library: Basic Minimum or Luxurious Maximum? 🔍 In the world of information security, the term "cyber threat library" periodically appears in variou…
The city celebrates, the mafia wakes up
The city celebrates, the mafia wakes up 🥰 Between January 1 and 11, approximately 180 malicious packages were removed from the NPM ecosystem, and 16 from PyPI…
Sold my phone with my personal data ☹️
Sold a phone with my personal data ☹️ When purchasing donor devices on platforms for selling personal items, a negative trend is emerging: many people rarely wo…
consumerWiper: architecture and mechanism of operation. part 2
consumerWiper: architecture and mechanism of operation. Part 2 ❗️ Conclusions Analysis of this malware demonstrates a rational approach by the attackers. Since…
consumerWiper: architecture and mechanism of operation. part 1
consumerWiper: architecture and operating mechanism. Part 1 ☹️ During the investigation of one of the incidents, the PT ESC response team discovered the consume…
"Tax Audit" from East Asia
"Tax Audit" from East Asia 🚪 At the beginning of the investigation, the PT ESC Threat Intelligence team discovered attacks on several Russian banks. All observe…
New window in dark mode
A New Window in Dark Mode 🫣 During the monitoring of new network threats in the network expertise department, suspicious traffic was noticed that was generated…
Using IoC unconventionally. Part 2. Threat Landscape
Using IoC in a Non-Standard Way. Part 2. Threat Landscape 🧘♀️ Earlier, we discussed how to use indicators of compromise for Threat Hunting. This time, we’ll ta…
🤑 I'll help you donate
🤑 I'll help you donate Recently, we received a sample of a malicious app for research that is used to steal money from Android users (screenshot 1). In 2015, st…