#threatresponseunit — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #threatresponseunit, aggregated by home.social.
-
Blind Eagle's North American Journey
The eSentire Threat Response Unit (TRU) recently observed the Blind Eagle threat actor targeting the manufacturing industry in North America. The actor used phishing emails containing malicious VBS files that delivered the Ande Loader, which then deployed Remcos RAT and NjRAT payloads. Technical analysis shows Blind Eagle leveraging crypters developed by threat actors known as Roda and Pjoao1578. The campaign targeted Spanish-speaking users at manufacturing companies. eSentire recommends implementing EDR solutions and security awareness training to help defend against Blind Eagle.
Pulse ID: 65f420f93280cbf7e41d2847
Pulse Link: https://otx.alienvault.com/pulse/65f420f93280cbf7e41d2847
Pulse Author: AlienVault
Created: 2024-03-15 10:20:41Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#OTX #OpenThreatExchange #InfoSec #bot #CyberSecurity #NorthAmerica #RAT #Phishing #BlindEagle #ThreatResponseUnit #VBS #Manufacturing #eSentire #Email #EDR #RemcosRat #Remcos #AlienVault