Out of the Woods: The Threat Hunting Podcast

Top 5 Threat Hunting Headlines - 26 February 2024
1. The DFIR Report: SEO Poisoning to Domain Control: The Gootloader Saga Continues

• https://thedfirreport.com/2024/02/26/seo-poisoning-to-domain-control-the-gootloader-saga-continues/

2. Cybersecurity & Infrastructure Security Agency: Updated: Top Cyber Actions for Securing Water Systems

3. The Hacker News: LockBit Ransomware Group Resurfaces After Law Enforcement Takedown

• https://thehackernews.com/2024/02/lockbit-ransomware-group-resurfaces.html

4. Group-IB: Extra Credit: VietCredCare Information Stealer Takes Aim at Vietnamese Businesses

• https://www.group-ib.com/blog/vietcredcare-stealer/

5. Help Net Security: Cybersecurity Fears Drive a Return to On-Premise Infrastructure From Cloud Computing

• https://www.helpnetsecurity.com/2024/02/22/cloud-repatriation-projects-reasons/?web_view=true

-----

Follow Us!

Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Discord: https://discord.gg/DR4mcW4zBr
TikTok: https://www.tiktok.com/@cyborgsecinc

• https://unit42.paloaltonetworks.com/mispadu-infostealer-variant/?web_view=true

2. Buzzing on Christmas Eve: Trigona Ransomware in 3 Hours

• https://thedfirreport.com/2024/01/29/buzzing-on-christmas-eve-trigona-ransomware-in-3-hours/

3. DDoS Attack Power Skyrockets to 1.6 Tbps

• https://www.helpnetsecurity.com/2024/02/02/ddos-attacks-h2-2023/?web_view=true

4. Evolution of UNC4990: Uncovering USB Malware

• https://www.mandiant.com/resources/blog/unc4990-evolution-usb-malware

5. Detecting and Mitigating a Phishing Threat: "Greatness"

• https://blog.sucuri.net/2024/02/detecting-and-mitigating-a-phishing-threat-greatness.html?web_view=true

-----

Follow Us!

Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity

3. The Fake Fix: New Chae$ 4.1 Malware Hides in Driver Downloads

• https://www.hackread.com/fake-fix-chaes-4-1-malware-hides-driver-downloads/?web_view=true

4. Outlook Vulnerability Discovery and New Ways to Leak NTLM Hashes

• https://www.varonis.com/blog/outlook-vulnerability-new-ways-to-leak-ntlm-hashes

5. Bulletproof Hosting: A Critical Cybercriminal Service

• https://intel471.com/blog/bulletproof-hosting-a-critical-cybercriminal-service?&web_view=true

-----

Follow Us!

Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity

Top 5 Threat Hunting Headlines - 08 January 2024

1. The Hacker News | Sea Turtle Cyber Espionage Campaign Targets Dutch IT and Telecom Companies

2. TRM | North Korean Hackers Stole $600 Million in Crypto in 2023

• https://www.trmlabs.com/post/north-korean-hackers-stole-600-million-in-crypto-in-2023

3. ClearSky Cyber Securfity | No-Justice Wiper

• https://www.clearskysec.com/wp-content/uploads/2024/01/No-Justice-Wiper.pdf

4. Uptycs | Ukraine Targeted by UAC-0050 Using Remcos RAT Pipe Method for Evasion

• https://www.uptycs.com/blog/remcos-rat-uac-0500-pipe-method

5. The Register | Ransomware payment ban: Wrong idea at the wrong time

-----

Follow Us!

Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

Top 5 TTPs & Behaviors - 11 Dec 2023

Get your FREE HUNTER Community Account to hunt for these TTPs and Behaviors 👇
https://hunter.cyborgsecurity.io/login

-----

Follow Us!

Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh

------------

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

Bonus Episode - November 30, 2023

Embark on an exploratory journey through the domain of cybersecurity with our host, Scott Poley, in this enlightening podcast episode. Our distinguished guest, Major Pierce, currently serving as the Director of Cyber Operations for the PA National Guard, unfolds her unique narrative within the digital defense realm – from her initial draw to the cyber sector to the pivotal decisions guiding her to a leading role.

Major Pierce's tenure at the PA National Guard is far from typical. In her pivotal position, she directs a nuanced strategy of cyber operations, tackling the complexities of digital warfare within the U.S. Army. The operations she oversees are characterized by a sophisticated blend of tactical foresight and the raw talent of her team, crafting bespoke solutions that address the multifaceted challenges of national security.

In this episode, Major Pierce offers a rare glimpse behind the scenes of military cybersecurity, discussing the trials and triumphs that shape the sector's landscape. As she narrates her professional trajectory and operational insights, listeners are invited to discover the synergy between individual expertise and collective operational success in the dynamic arena of cyber operations. Tune in for an episode rich in anecdotes and wisdom from the forefront of cybersecurity innovation.

*Connect with Major Pierce: https://www.linkedin.com/in/christine-pierce-mps-cissp-3a128080/

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

Top 5 Threat Hunting Headlines - 27 Nov 2023

Secure List: HrServ – Previously Unknown Web Shell Used in APT Attack

https://securelist.com/hrserv-apt-web-shell/111119/

Group-IB: Hunting Rituals #2.2: Threat Hunting for Abuse of Windows Services

https://www.group-ib.com/blog/hunting-rituals-windows-services-part-2/

Red Canary: Threat Hunting for PsExec, Open-Source Clones, and Other Lateral Movement Tools

https://redcanary.com/blog/threat-hunting-psexec-lateral-movement/

Talos: A Deep Dive into Phobos Ransomware, Recently Deployed by 8Base Group

https://blog.talosintelligence.com/deep-dive-into-phobos-ransomware/

Cyware: Lazarus Group Exploit MagicLine2NX Flaw to Launch Supply Chain Attacks

https://cyware.com/news/lazarus-group-exploit-magicline4nx-flaw-to-launch-supply-chain-attacks-11b98153

-----

Follow Us!

Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

Join our host, Scott Poley, in this insightful bonus episode where he sits down with Tony Pietrocola, the driving force behind AgileBlue. Tony shares his personal expedition into the realm of cybersecurity, detailing the journey that shaped his expertise. He also unfolds his forward-thinking perspective on the future of cybersecurity in our rapidly evolving digital age.

AgileBlue offers a synergy of AI-driven cybersecurity fortified with the reliability of human expertise. Their sophisticated SOC|SOAR platform stands guard over your digital and cloud infrastructure. It provides comprehensive 24/7 oversight, adept at swiftly pinpointing and mitigating cyber threats, ensuring peace of mind through vigilant monitoring, detection, and responsive action.

*Learn more about AgileBlue – https://www.linkedin.com/in/tonypietrocola/
*Connect with Tony - https://agileblue.com/

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

Bonus Episode - November 17, 2023

Dive into the world of cybersecurity with Sam Paredes on our latest podcast episode. As the Founder and Security Researcher at BugNode, Samuel shares his personal odyssey within the tech industry, from a burgeoning passion to the helm of a trailblazing security enterprise.

BugNode isn't just another web application testing service. Under Samuel's leadership, the company champions a meticulous, hands-on approach to safeguarding applications. By tackling security challenges with human ingenuity, BugNode's expert team crafts a tailored defense strategy for each client, ensuring robust protection that empowers businesses to thrive without the overhead of digital threats.

Throughout the episode, Samuel provides an insider's look at the hurdles faced by security professionals and how BugNode strategically overcomes them. Tune in to gain valuable insights into the intersection of personal growth and professional excellence in the fast-evolving landscape of application security.

*Learn more about BugNode - https://www.bugnode.io/
*Connect with Sam - https://www.linkedin.com/in/sam-par/

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc