#sekoia — Public Fediverse posts

The second and third parts of our investigation into the #Gamaredon, the cyberespionage group operated by the Russian #FSB, are live!
🪆Part 2 — The loaders https://buff.ly/bBYZSKa
🪆Part 3 — The stealer & full infrastructure https://buff.ly/74WHuPd

#CTI #TDR #Sekoia

The second and third parts of our investigation into the #Gamaredon, the cyberespionage group operated by the Russian #FSB, are live!
🪆Part 2 — The loaders https://buff.ly/bBYZSKa
🪆Part 3 — The stealer & full infrastructure https://buff.ly/74WHuPd

#CTI #TDR #Sekoia

The second and third parts of our investigation into the #Gamaredon, the cyberespionage group operated by the Russian #FSB, are live!
🪆Part 2 — The loaders https://buff.ly/bBYZSKa
🪆Part 3 — The stealer & full infrastructure https://buff.ly/74WHuPd

#CTI #TDR #Sekoia

The second and third parts of our investigation into the #Gamaredon, the cyberespionage group operated by the Russian #FSB, are live!
🪆Part 2 — The loaders https://buff.ly/bBYZSKa
🪆Part 3 — The stealer & full infrastructure https://buff.ly/74WHuPd

#CTI #TDR #Sekoia

The second and third parts of our investigation into the #Gamaredon, the cyberespionage group operated by the Russian #FSB, are live!
🪆Part 2 — The loaders https://buff.ly/bBYZSKa
🪆Part 3 — The stealer & full infrastructure https://buff.ly/74WHuPd

#CTI #TDR #Sekoia

“I Paid Twice” Scam Infects Booking.com Users with PureRAT via ClickFix https://hackread.com/i-paid-twice-scam-booking-com-purerat-clickfix/ #ScamsandFraud #Cybersecurity #CyberAttack #ResolverRAT #Bookingcom #PureCoder #Security #PureHVNC #Malware #Expedia #Privacy #PureRAT #Sekoia #Travel #Hotel

“I Paid Twice” Scam Infects Booking.com Users with PureRAT via ClickFix https://hackread.com/i-paid-twice-scam-booking-com-purerat-clickfix/ #ScamsandFraud #Cybersecurity #CyberAttack #ResolverRAT #Bookingcom #PureCoder #Security #PureHVNC #Malware #Expedia #Privacy #PureRAT #Sekoia #Travel #Hotel

“I Paid Twice” Scam Infects Booking.com Users with PureRAT via ClickFix https://hackread.com/i-paid-twice-scam-booking-com-purerat-clickfix/ #ScamsandFraud #Cybersecurity #CyberAttack #ResolverRAT #Bookingcom #PureCoder #Security #PureHVNC #Malware #Expedia #Privacy #PureRAT #Sekoia #Travel #Hotel

“I Paid Twice” Scam Infects Booking.com Users with PureRAT via ClickFix https://hackread.com/i-paid-twice-scam-booking-com-purerat-clickfix/ #ScamsandFraud #Cybersecurity #CyberAttack #ResolverRAT #Bookingcom #PureCoder #Security #PureHVNC #Malware #Expedia #Privacy #PureRAT #Sekoia #Travel #Hotel

TechNadu interviewed François Deruty, Chief Intelligence Officer of @sekoia_io to get answers about innovations observed in cybercrime operations, challenges faced by CIOs, and adjustments to intelligence programs.

Deruty spoke about organizations tailoring red-team scenarios to the precise threats they face. He emphasized how Generative AI–powered deepfakes and hyper-realistic phishing lures force CTI teams towards dynamic behavior modeling.

This interview discusses the following and more:
🟣Cybersecurity isn’t just tech; it’s about understanding geopolitical risks
🟣Generative AI playing a pivotal role in Security Operation Centers
🟣Thwarting real-world threats beyond borders with a collaborative effort

🔗Read the interview: https://www.technadu.com/exploiting-vulnerabilities-using-ai-at-machine-speed-the-alarming-number-of-unpatched-devices-and-anticipating-how-adversaries-think/600534/

🔔 👉 Follow @technadu for more Expert Insights and share your views in the comments below.

#Sekoia #TechNadu #Interviews #AI #Cybersecurity #GenerativeAI #SocialEngineering #CyberThreats #CyberResilience #CTI

TechNadu interviewed François Deruty, Chief Intelligence Officer of @sekoia_io to get answers about innovations observed in cybercrime operations, challenges faced by CIOs, and adjustments to intelligence programs.

Deruty spoke about organizations tailoring red-team scenarios to the precise threats they face. He emphasized how Generative AI–powered deepfakes and hyper-realistic phishing lures force CTI teams towards dynamic behavior modeling.

This interview discusses the following and more:
🟣Cybersecurity isn’t just tech; it’s about understanding geopolitical risks
🟣Generative AI playing a pivotal role in Security Operation Centers
🟣Thwarting real-world threats beyond borders with a collaborative effort

🔗Read the interview: https://www.technadu.com/exploiting-vulnerabilities-using-ai-at-machine-speed-the-alarming-number-of-unpatched-devices-and-anticipating-how-adversaries-think/600534/

🔔 👉 Follow @technadu for more Expert Insights and share your views in the comments below.

#Sekoia #TechNadu #Interviews #AI #Cybersecurity #GenerativeAI #SocialEngineering #CyberThreats #CyberResilience #CTI

TechNadu interviewed François Deruty, Chief Intelligence Officer of @sekoia_io to get answers about innovations observed in cybercrime operations, challenges faced by CIOs, and adjustments to intelligence programs.

Deruty spoke about organizations tailoring red-team scenarios to the precise threats they face. He emphasized how Generative AI–powered deepfakes and hyper-realistic phishing lures force CTI teams towards dynamic behavior modeling.

This interview discusses the following and more:
🟣Cybersecurity isn’t just tech; it’s about understanding geopolitical risks
🟣Generative AI playing a pivotal role in Security Operation Centers
🟣Thwarting real-world threats beyond borders with a collaborative effort

🔗Read the interview: https://www.technadu.com/exploiting-vulnerabilities-using-ai-at-machine-speed-the-alarming-number-of-unpatched-devices-and-anticipating-how-adversaries-think/600534/

🔔 👉 Follow @technadu for more Expert Insights and share your views in the comments below.

#Sekoia #TechNadu #Interviews #AI #Cybersecurity #GenerativeAI #SocialEngineering #CyberThreats #CyberResilience #CTI

TechNadu interviewed François Deruty, Chief Intelligence Officer of @sekoia_io to get answers about innovations observed in cybercrime operations, challenges faced by CIOs, and adjustments to intelligence programs.

Deruty spoke about organizations tailoring red-team scenarios to the precise threats they face. He emphasized how Generative AI–powered deepfakes and hyper-realistic phishing lures force CTI teams towards dynamic behavior modeling.

This interview discusses the following and more:
🟣Cybersecurity isn’t just tech; it’s about understanding geopolitical risks
🟣Generative AI playing a pivotal role in Security Operation Centers
🟣Thwarting real-world threats beyond borders with a collaborative effort

🔗Read the interview: https://www.technadu.com/exploiting-vulnerabilities-using-ai-at-machine-speed-the-alarming-number-of-unpatched-devices-and-anticipating-how-adversaries-think/600534/

🔔 👉 Follow @technadu for more Expert Insights and share your views in the comments below.

#Sekoia #TechNadu #Interviews #AI #Cybersecurity #GenerativeAI #SocialEngineering #CyberThreats #CyberResilience #CTI

TechNadu interviewed François Deruty, Chief Intelligence Officer of @sekoia_io to get answers about innovations observed in cybercrime operations, challenges faced by CIOs, and adjustments to intelligence programs.

Deruty spoke about organizations tailoring red-team scenarios to the precise threats they face. He emphasized how Generative AI–powered deepfakes and hyper-realistic phishing lures force CTI teams towards dynamic behavior modeling.

This interview discusses the following and more:
🟣Cybersecurity isn’t just tech; it’s about understanding geopolitical risks
🟣Generative AI playing a pivotal role in Security Operation Centers
🟣Thwarting real-world threats beyond borders with a collaborative effort

🔗Read the interview: https://www.technadu.com/exploiting-vulnerabilities-using-ai-at-machine-speed-the-alarming-number-of-unpatched-devices-and-anticipating-how-adversaries-think/600534/

🔔 👉 Follow @technadu for more Expert Insights and share your views in the comments below.

#Sekoia #TechNadu #Interviews #AI #Cybersecurity #GenerativeAI #SocialEngineering #CyberThreats #CyberResilience #CTI

WebDAV-as-a-Service: Uncovering the infrastructure behind Emmenhtal loader distribution - Sekoia.io Blog

The Emmenhtal loader, also known as PeakLight, operates in a memory-only manner, making it difficult to detect and analyse. It is primarily used to distribute other malicious payloads, including well-known infostealers that target sensitive information.

Pulse ID: 66ec7cadd732dd516497e4f8
Pulse Link: https://otx.alienvault.com/pulse/66ec7cadd732dd516497e4f8
Pulse Author: AlienVault
Created: 2024-09-19 19:34:05

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #InfoStealer #OTX #OpenThreatExchange #RAT #Sekoia #bot #AlienVault

Solving the 7777 Botnet enigma: A cybersecurity quest

Sekoia.io investigated the mysterious 7777 botnet (aka Quad7 botnet), which compromised TP-Link routers to relay password spraying attacks against Microsoft 365 accounts. The investigation involved intercepting network communications and malware deployed on a compromised router in France. The findings suggest the Quad7 botnet operators leverage these routers for possible long-term business email compromise (BEC) cybercriminal activity rather than an APT threat actor. However, some mysteries remain regarding the exploits used, the geographical distribution, and the attribution of this activity cluster.

Pulse ID: 669f6309cef8f004612f46ab
Pulse Link: https://otx.alienvault.com/pulse/669f6309cef8f004612f46ab
Pulse Author: AlienVault
Created: 2024-07-23 08:00:08

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #Email #France #InfoSec #Malware #Microsoft #OTX #OpenThreatExchange #Password #RAT #RCE #Sekoia #Word #bot #botnet #AlienVault

A new phishing kit is targeting #Gmail and #Microsoft email & it can even bypass #2FA

#Tycoon #2FA evaded security analysts, while allowing threat actors to bypass #2FA, according to #Sekoia, who reported the Phishing-as-a-Service #PhaaS tool.

https://www.techradar.com/pro/security/a-new-phishing-kit-is-targeting-gmail-and-microsoft-email-accounts-and-it-can-even-bypass-2fa

A new phishing kit is targeting #Gmail and #Microsoft email & it can even bypass #2FA

#Tycoon #2FA evaded security analysts, while allowing threat actors to bypass #2FA, according to #Sekoia, who reported the Phishing-as-a-Service #PhaaS tool.

https://www.techradar.com/pro/security/a-new-phishing-kit-is-targeting-gmail-and-microsoft-email-accounts-and-it-can-even-bypass-2fa

A new phishing kit is targeting #Gmail and #Microsoft email & it can even bypass #2FA

#Tycoon #2FA evaded security analysts, while allowing threat actors to bypass #2FA, according to #Sekoia, who reported the Phishing-as-a-Service #PhaaS tool.

https://www.techradar.com/pro/security/a-new-phishing-kit-is-targeting-gmail-and-microsoft-email-accounts-and-it-can-even-bypass-2fa

A new phishing kit is targeting #Gmail and #Microsoft email & it can even bypass #2FA

#Tycoon #2FA evaded security analysts, while allowing threat actors to bypass #2FA, according to #Sekoia, who reported the Phishing-as-a-Service #PhaaS tool.

https://www.techradar.com/pro/security/a-new-phishing-kit-is-targeting-gmail-and-microsoft-email-accounts-and-it-can-even-bypass-2fa

Analysts at #cybersecurity firm #Sekoia have uncovered a new strain of malware called #StealC, an advanced infostealer designed to steal sensitive data from victims. https://andreafortuna.org/2023/02/24/stealc-a-new-advanced-infostealer?utm_source=dlvr.it&utm_medium=mastodon

Analysts at #cybersecurity firm #Sekoia have uncovered a new strain of malware called #StealC, an advanced infostealer designed to steal sensitive data from victims. https://andreafortuna.org/2023/02/24/stealc-a-new-advanced-infostealer?utm_source=dlvr.it&utm_medium=mastodon

🎙️Join us LIVE next Tuesday on our #webinar on "How to neutralize #attacks and enrich alert data using #Sekoia and #CrowdSec.

Learn how to detect #alerts in real time! 🚨

Register today👉https://bit.ly/3itxbOY

📅 17th January 2023
⏰ 11 AM CET
📍 Online

📬 RisePro: Malware zielt auf Softwarepiraten
#DarkCommerce #Hacking #Flashpoint #Infostealer #Malware #RisePro #Sekoia #Softwarepiraten #Vidar https://tarnkappe.info/artikel/hacking/risepro-malware-zielt-auf-softwarepiraten-261504.html

📬 RisePro: Malware zielt auf Softwarepiraten
#DarkCommerce #Hacking #Flashpoint #Infostealer #Malware #RisePro #Sekoia #Softwarepiraten #Vidar https://tarnkappe.info/artikel/hacking/risepro-malware-zielt-auf-softwarepiraten-261504.html

📬 RisePro: Malware zielt auf Softwarepiraten
#DarkCommerce #Hacking #Flashpoint #Infostealer #Malware #RisePro #Sekoia #Softwarepiraten #Vidar https://tarnkappe.info/artikel/hacking/risepro-malware-zielt-auf-softwarepiraten-261504.html

📬 RisePro: Malware zielt auf Softwarepiraten
#DarkCommerce #Hacking #Flashpoint #Infostealer #Malware #RisePro #Sekoia #Softwarepiraten #Vidar https://tarnkappe.info/artikel/hacking/risepro-malware-zielt-auf-softwarepiraten-261504.html

📬 RisePro: Malware zielt auf Softwarepiraten
#DarkCommerce #Hacking #Flashpoint #Infostealer #Malware #RisePro #Sekoia #Softwarepiraten #Vidar https://tarnkappe.info/artikel/hacking/risepro-malware-zielt-auf-softwarepiraten-261504.html