threat research – Page 9 – PossibleThreat Articles

Credit to Author: rajeshnataraj| Date: Thu, 19 Oct 2023 11:00:35 +0000

Multiple LockBit knock-off attacks in September targeting obsolete software foiled, exposing tactics and tools.

Patch Tuesday harvests a bumper crop in October

October 11, 2023 0 Comments curl, cve-2023-38545, cve-2023-44487, featured, libcurl, Microsoft, Patch Tuesday, threat research

Credit to Author: Angela Gunn| Date: Wed, 11 Oct 2023 18:06:24 +0000

Two significant vulnerabilities – both extending far beyond Microsoft – make this a crucial month for admins to stay on their game

Security Sophos

Latest evolution of ‘pig butchering’ scam lures victim into fake mining scheme

September 18, 2023 0 Comments cryptocurrency scams, featured, liquidity mining, shazhupan, sophos x-ops, threat research

Credit to Author: gallagherseanm| Date: Mon, 18 Sep 2023 10:15:27 +0000

Liquidity mining scam puts cruel new spin on Chinese cryptocurrency fraud, with a dash of AI chat

Security Sophos

A 59-CVE Patch Tuesday with something for nearly everyone

September 12, 2023 0 Comments exchange, featured, Microsoft Windows, miracast, Patch Tuesday, threat research, windows themes

Credit to Author: Angela Gunn| Date: Tue, 12 Sep 2023 20:29:53 +0000

A wide-ranging month includes four patches you may have applied in August, as well an item of particular end-user interest

Security Sophos

For the win? Offensive research contests on criminal forums

August 29, 2023 0 Comments Exploit, featured, marketplaces, sophos x-ops, threat research, XSS

Credit to Author: Matt Wixey| Date: Tue, 29 Aug 2023 10:00:17 +0000

We explore some of the entries in recent cybercrime research competitions, and what they say about threat actor innovation and priorities

Security Sophos

Time keeps on slippin’ slippin’ slippin’: The 2023 Active Adversary Report for Tech Leaders

August 23, 2023 0 Comments active adversary report, active directory, attribution, detection, dwell time, featured, Incident Response, MFA, mtr, RDP, sophos x-ops, threat research

Credit to Author: Angela Gunn| Date: Wed, 23 Aug 2023 10:01:02 +0000

A deep dive into incident-response cases from the first half of this year finds both attackers and defenders picking up the pace

Security Sophos

Attacker combines phone, email lures into believable, complex attack chain

August 10, 2023 0 Comments Defcon, electron, featured, image spam, notepad++, socat, Social engineering, sophos x-ops, threat research, Tor, war stories

Credit to Author: Andrew Brandt| Date: Thu, 10 Aug 2023 10:00:10 +0000

A social engineering phone call lends authenticity to the attacker’s malicious email

Security Sophos

A piñata of patches for Microsoft in August

August 9, 2023 0 Comments amd, cve-2023-20569, cve-2023-38180, featured, Microsoft, Patch Tuesday, threat research

Credit to Author: Angela Gunn| Date: Wed, 09 Aug 2023 18:28:41 +0000

A lighter month than July with just 73 fixes on tap, but a phalanx of advisories and third-party alerts will keep sysadmins bashing away

Security Sophos

Enough attribution to count

August 8, 2023 0 Comments attribution, detection, sophos x-ops, tac, threat activity cluster, threat research

Credit to Author: Chester Wisniewski| Date: Tue, 08 Aug 2023 10:01:37 +0000

Naming and shaming the bad guys can be gratifying, but for practical protection, Threat Activity Clusters are the way

Security Sophos

Clustering attacker behavior reveals hidden patterns

August 8, 2023 0 Comments black basta, featured, hive, mdr, Ransomware, royal, sophos x-ops, tac, threat activity cluster, threat research

Credit to Author: Andrew Brandt| Date: Tue, 08 Aug 2023 10:00:11 +0000

A collection of very specific behaviors, observed by Sophos X-Ops incident response analysts in the lead-up to four separate ransomware attacks in the first quarter of 2023, indicates an unexpected connection between the attacks. In the parlance of the Managed Detection and Response (MDR) team, the peculiarly similar details constitute a threat activity cluster that […]