September 14, 2023

#65 - Intel Chat: DB#JAMMER, Chae$ malware, W3LL, APT34 deploy Side Twist Trojan and government-backed actors in North Korea target security researchers.

37 minutes

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

Securonix Threat Labs are reporting that threat actors working as part of the DB#JAMMER attack campaigns are compromising exposed MSSQL databases using brute force attacks.
AhnLab’s Security Emergency Response Center are reporting on threat actors using phishing emails to distribute some fileless malware.
The researchers over at Group-IB have uncovered a covert business email compromise phishing campaign targeting Microsoft 365.
NSFOCUS Security Labs captured a new APT34 phishing attack against enterprise targets that released a variant of the SideTwist Trojan to achieve long-term control of the victim host.
Threat Analysis Group publicly disclosed a campaign from government-backed actors in North Korea who used 0-day exploits to target security researchers working on vulnerability research and development.

The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.

...more

By LimaCharlie

2424 ratings

September 14, 2023

37 minutes

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

Securonix Threat Labs are reporting that threat actors working as part of the DB#JAMMER attack campaigns are compromising exposed MSSQL databases using brute force attacks.
AhnLab’s Security Emergency Response Center are reporting on threat actors using phishing emails to distribute some fileless malware.
The researchers over at Group-IB have uncovered a covert business email compromise phishing campaign targeting Microsoft 365.
NSFOCUS Security Labs captured a new APT34 phishing attack against enterprise targets that released a variant of the SideTwist Trojan to achieve long-term control of the victim host.
Threat Analysis Group publicly disclosed a campaign from government-backed actors in North Korea who used 0-day exploits to target security researchers working on vulnerability research and development.

The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.

...more