#toddycat — Public Fediverse posts

ToddyCat: your hidden email assistant. Part 2
#ToddyCat #Umbrij
https://securelist.com/toddycat-apt-umbrij-tool-and-oauth/120251/

ToddyCat rüstet auf – und nimmt Outlook sowie Microsoft‑365‑Token ins Visier! Die jüngsten Erkenntnisse von Kaspersky zeigen: Die APT‑Gruppe ToddyCat professionalisiert ihre Werkzeuge weiter und verlagert ihren Fokus zunehmend auf den Diebstahl von E‑Mail-Daten und OAuth‑Tokens aus Microsoft‑Umgebungen. E‑Mail-Systeme bleiben ein attraktives Spionageziel. #CyberSecurity #APT #ToddyCat #Microsoft365 #Outlook #EmailSecurity #Kaspersky

ToddyCat: your hidden email assistant. Part 1
#ToddyCat #TomBerBil #TCSectorCopy
https://securelist.com/toddycat-apt-steals-email-data-from-outlook/118044/

#ToddyCat: #Malware nutzt Sicherheitsleck in Antivirensoftware | Security https://www.heise.de/news/ToddyCat-Malware-nutzt-Sicherheitsleck-in-Antivirensoftware-10344279.html #Eset #Patchday

ESET Vulnerability Exploited for Stealthy Malware Execution https://www.securityweek.com/eset-vulnerability-exploited-for-stealthy-malware-execution/ #Vulnerabilities #vulnerability #exploited #ToddyCat #ESET

ESET Vulnerability Exploited for Stealthy Malware Execution https://www.securityweek.com/eset-vulnerability-exploited-for-stealthy-malware-execution/ #Vulnerabilities #vulnerability #exploited #ToddyCat #ESET

ToddyCat APT Targets ESET Bug to Load Silent Malware – Source: www.darkreading.com https://ciso2ciso.com/toddycat-apt-targets-eset-bug-to-load-silent-malware-source-www-darkreading-com/ #rssfeedpostgeneratorecho #DarkReadingSecurity #CyberSecurityNews #DARKReading #ToddyCat

How ToddyCat tried to hide behind AV software
#ToddyCat #CVE_2024_11859
https://securelist.com/toddycat-apt-exploits-vulnerability-in-eset-software-for-dll-proxying/116086/

How ToddyCat tried to hide behind AV software – Source: securelist.com https://ciso2ciso.com/how-toddycat-tried-to-hide-behind-av-software-source-securelist-com/ #Vulnerabilitiesandexploits #AntivirusVulnerabilities #rssfeedpostgeneratorecho #zerodayvulnerabilities #APT(Targetedattacks) #MalwareDescriptions #MalwareTechnologies #CyberSecurityNews #Defenseevasion #Windowsmalware #securelistcom #Encryption #Incidents #ToddyCat #Drivers #Malware #Trojan #BYOVD #APT #CVE #DLL

ToddyCat is making holes in your infrastructure – Source: securelist.com https://ciso2ciso.com/toddycat-is-making-holes-in-your-infrastructure-source-securelist-com/ #rssfeedpostgeneratorecho #APT(Targetedattacks) #CyberSecurityNews #Targetedattacks #cyberespionage #securelistcom #APTreports #datatheft #ToddyCat #WhatsApp #APT #ssh #VPN

Kaspersky reports on TTPs used by the cyberespionage group ToddyCat, an APT with little history and not currently attributed to any country. ToddyCat uses LoFiSe and PcExter for collecting and exfiltrating flies. They used reverse SSH tunnel to maintain access, server utility (VPN Server) from the SoftEther VPN, Ngrok agent and Krong (proxy), FRP client (fast reverse proxy), a new tool called Cuthead for data collection, WAExp (WhatsApp data stealer), and TomBerBil for stealing passwords from browsers. IOC included. 🔗 https://securelist.com/toddycat-traffic-tunneling-data-extraction-tools/112443/

#ToddyCat #cyberespionage #APT #threatintel #IOC

🚨 Alert: "Stayin' Alive" Cyber Campaign Targets Asia
Since 2021, the "Stayin' Alive" cyber campaign has hit government and telcos in Asia with diverse, disposable malware. Spear-phishing, custom tools, and ToddyCat group involvement. RELIANOID offers solutions for preemptive cyber defense.
#StayinAlive #Telco #Telecom #telecommunications #Cybersecurity #ThreatAlert #Malware #CyberAttack #InfoSec #TechSecurity #StaySecure #DigitalThreats #ToddyCat #AsiaCyberThreats
https://www.relianoid.com/blog/asian-telecoms-in-the-eye-of-the-storm-for-toddycat-hackers/

Chinese APT ToddyCat Targets Asian Telecoms, Governments - https://www.redpacketsecurity.com/chinese-apt-toddycat-targets-asian-telecoms-governments/

#threatintel #Cyber_Espionage #Spear-Phishing #ToddyCat