U.S. Cyber Command pointed to multiple malware sets used by MuddyWater.
Among those, PowGoop correlates with activities SentinelOne triaged in recent incidents.
Sign Up For Threat Alerts
May 25, 2022
Twisted Panda: Chinese APT espionage operation against...
Check Point Research (CPR) details a targeted campaign that has been using sanctions-related baits to...
May 23, 2022
A deeper look at XorDdos malware targeting...
In the last six months, we observed a 254% increase in activity from a Linux...
May 22, 2022
Ransomware Spotlight RansomEXX
RansomEXX is another ransomware variant that runs on a ransomware-as-a-service (RaaS) model and has been...
May 19, 2022
Malicious Compiled HTML Help File Delivering Agent...
PaloAlto Unit42 discovered a malicious HTML help file delivering Agent Tesla. The attack is interesting...
May 16, 2022
BPFdoor: Stealthy Linux malware bypasses firewalls for...
A recently discovered backdoor malware called BPFdoor has been stealthily targeting Linux and Solaris systems...
May 16, 2022
Onyx ransomware destroys files instead of encrypting...
A new Onyx ransomware operation is destroying files larger than 2MB instead of encrypting them,...
May 15, 2022
Researchers Warn of Nerbian RAT Targeting Entities...
A previously undocumented remote access trojan (RAT) written in the Go programming language has been...
May 12, 2022
Bitter APT targets Bangladesh
Cisco Talos has observed an ongoing malicious campaign from the Bitter APT group that appears...
May 11, 2022
Experts Sound Alarm on DCRat Backdoor Being...
Cybersecurity researchers have shed light on an actively maintained remote access trojan called DCRat (aka...
May 11, 2022
The Lotus Panda is awake, again
In this attack analyzed by C25, the Chinese APT used a spear phishing email to...
May 09, 2022
Moshen Dragon – Abusing Security Software to...
SentinelLabs recently uncovered a cluster of activity targeting the telecommunication sector in Central Asia, utilizing...
May 09, 2022
AvosLocker Ransomware Abuses Driver File to Disable...
TrendMicro found samples of AvosLocker ransomware that makes use of a legitimate driver file to...
May 02, 2022
LockBit Ransomware Side-loads Cobalt Strike Beacon
The VMware command line utility VMwareXferlogs.exe used for data transfer to and from VMX logs...
May 02, 2022
Emotet Returns With New TTPs And Delivers...
The epoch4 Emotet server started spamming and delivering zipped .lnk files to its victims through...
Apr 28, 2022
BRONZE PRESIDENT
Government-sponsored threat actors collect intelligence to benefit their country, and changes to the political landscape...