DISCARDED: Tales From the Threat Research Trenches

Decoding TA4903: Exploring the Dual Objectives of a Unique Cyber Threat Actor


Listen Later

Send us fan mail!

Today’s focus is on the elusive threat actor known as TA4903. But that's not all - we've got a special treat for you as well. Our longtime producer, Mindy, is joining us as a co-host, bringing her expertise and insights to the table, as we turn the mic around and interview, Selena! 

We explore recent research conducted by Selena and her team on TA4903’s distinct objectives. Unlike many cybercrime actors, TA4903 demonstrates a unique combination of tactics, targeting both high-volume credential phishing campaigns and lower-volume direct business email compromises.

We also dive into:
  • TA4903 spoofs government entities like the Department of Transportation and the Department of Labor to lure victims
  • Use of advanced techniques including evil proxy for multi-factor authentication token theft and QR codes for phishing campaigns
  • Rising trends in cryptocurrency-related scams and other financial frauds

Resources mentioned:
MFA Bypass (Blog) by Timothy Kromphardt

IC3 2023 FBI Report 

New TA4903 research: https://www.proofpoint.com/us/blog/threat-insight/ta4903-actor-spoofs-us-government-small-businesses-phishing-bec-bids

For more information, check out our website.
...more
View all episodesView all episodes
Download on the App Store

DISCARDED: Tales From the Threat Research TrenchesBy Proofpoint

  • 4.9
  • 4.9
  • 4.9
  • 4.9
  • 4.9

4.9

55 ratings


More shows like DISCARDED: Tales From the Threat Research Trenches

View all
Hacked by Hacked

Hacked

189 Listeners

Risky Business by Patrick Gray

Risky Business

372 Listeners

CyberWire Daily by N2K Networks

CyberWire Daily

1,021 Listeners

Click Here by Recorded Future News

Click Here

418 Listeners

Darknet Diaries by Jack Rhysider

Darknet Diaries

8,063 Listeners

Three Buddy Problem by Security Conversations

Three Buddy Problem

61 Listeners

Risky Bulletin by risky.biz

Risky Bulletin

44 Listeners

Adversary Universe Podcast by CrowdStrike

Adversary Universe Podcast

77 Listeners

Only Malware in the Building by DISCARDED | N2K Networks

Only Malware in the Building

8 Listeners