proxyshell – Page 2 – PossibleThreat Articles

Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits

February 28, 2022 0 Comments bazar, cobalt strike, conti, featured, karma, proxyshell, Ransomware, SophosLabs Uncut, threat research

Credit to Author: gallagherseanm| Date: Mon, 28 Feb 2022 12:30:19 +0000

An unpatched Microsoft Exchange Server let both ransomware actors in; Karma just stole data, while Conti encrypted.

Security Sophos

Vulnerable Exchange server hit by Squirrelwaffle and financial fraud

February 15, 2022 0 Comments email security, exchange vulnerability, featured, fraud, malspam, proxylogon, proxyshell, security operations, squirrelwaffle

Credit to Author: Tilly Travers| Date: Tue, 15 Feb 2022 13:00:59 +0000

While Squirrelwaffle leveraged Exchange to spread malspam through hijacked email threads, one thread was spirited away by attackers to trick the target into a money transfer

Security Sophos

Rapid Response: The Squirrelwaffle Incident Guide

February 15, 2022 0 Comments featured, malware, mtr, proxylogon, proxyshell, rapid response, security operations, sophos xdr, squirrelwaffle

Credit to Author: Tilly Travers| Date: Tue, 15 Feb 2022 13:00:10 +0000

Squirrelwaffle is a malicious dropper or loader used to deliver other malware onto target systems. This guide shows Security Operations Centers (SOCs) and Incident Response Teams how to detect and respond to the presence of Squirrelwaffle on the network

MalwareBytes Security

Ransomware gang hits 49ers’ network before Super Bowl kick off

February 14, 2022 0 Comments 2fa, 49ers, blackbyte ransomware, FBI, proxyshell, proxyshell vulnerability, raas, Ransomware, Ransomware as a Service, san franciso 49ers, two-factor authentication

Credit to Author: Jovi Umawing| Date: Mon, 14 Feb 2022 15:52:18 +0000

Just hours before the Super Bowl Sunday kick off, the San Francisco 49ers confirmed it was the victim of a ransomware attack.

Categories: Ransomware

Tags: 2fa 49ers BlackByte ransomware fbi proxyshell ProxyShell vulnerability raas ransomware ransomware-as-a-service San Franciso 49ers two-factor authentication