Staging a Quack: Reverse Analyzing a Fileless QAKBOT Stager

Credit to Author: Abraham Camba| Date: Fri, 17 Dec 2021 00:00:00 +0000

We analyzed a fileless QAKBOT stager possibly connected to the recently reported Squirrelwaffle campaign.

Read more

This Week in Security News – December 17, 2021

Credit to Author: Jon Clay| Date: Fri, 17 Dec 2021 00:00:00 +0000

This week, read on Purple Fox’s infection chain observed by Trend Micro’s Managed XDR. Also, learn about the Log4j vulnerability that has the potential to cause ‘incalculable’ damage.

Read more

Volatile and Adaptable: Tracking the Movements of Modern Ransomware

Credit to Author: Trend Micro Research| Date: Wed, 15 Dec 2021 00:00:00 +0000

Trend Micro’s tracking of modern ransomware, as well as of older families, shows which attacks are gaining momentum and which families are particularly dangerous for enterprises and private users.

Read more

Collecting In the Dark: Tropic Trooper Targets Transportation and Government

Credit to Author: Nick Dai| Date: Tue, 14 Dec 2021 00:00:00 +0000

Our long-term monitoring of the cyberespionage group Earth Centaur (aka Tropic Trooper) shows that the threat actors are equipped with new tools and techniques. The group seems to be targeting transportation companies and government agencies related to transportation.

Read more

A Look Into Purple Fox’s Server Infrastructure

Credit to Author: Jay Yaneza| Date: Mon, 13 Dec 2021 00:00:00 +0000

By examining Purple Fox’s routines and activities, both with our initial research and the subject matter we cover in this blog post, we hope to help incident responders, security operation centers (SOCs), and security researchers find and weed out Purple Fox infections in their network.

Read more