Out of the Woods: The Threat Hunting Podcast

Top 5 Threat Hunting Headlines - 02 Oct 2023
The Thin Line: Educational Tools vs. Malicious Threats – A Focus on The-Murk-Stealer

• https://www.cyfirma.com/outofband/the-thin-line-educational-tools-vs-malicious-threats-a-focus-on-the-murk-stealer/

Budworm: APT Group Uses Updated Custom Tool in Attacks on Government and Telecoms Org

• https://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/budworm-tool-update-telecoms-govt

GitHub – Nick-Vinesmoke/The-Murk-stealer

• https://github.com/Nick-Vinesmoke/The-Murk-stealer

SecureList: A cryptor, a stealer and a banking trojan

• https://securelist.com/crimeware-report-asmcrypt-loader-lumma-stealer-zanubis-banker/110512/

Meet LostTrust ransomware — A likely rebrand of the MetaEncryptor gang

• https://www.bleepingcomputer.com/news/security/meet-losttrust-ransomware-a-likely-rebrand-of-the-metaencryptor-gang/

 -----
 Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh

------------

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

**Out of the Woods: LIVE & Interactive Episode
September 21 @ 7:00 - 8:30 PM ET
Save your seat👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e11


Top 5 Threat Hunting Headlines - 11 Sept 2023
Microsoft Teams phishing attack pushes DarkGate malware

• https://www.bleepingcomputer.com/news/security/microsoft-teams-phishing-attack-pushes-darkgate-malware/?&web_view=true

GitHub - boringtools/git-alerts

• https://github.com/boringtools/git-alerts

Technical Analysis of HijackLoader

• https://www.zscaler.com/blogs/security-research/technical-analysis-hijackloader?&web_view=true

FBI Identifies Lazarus Group Cyber Actors as Responsible for Theft of $41 Million from Stake.com

UK Government Backs Down on Anti-Encryption Stance

• https://www.infosecurity-magazine.com/news/uk-government-backs-down/?&web_view=true

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

**Out of the Woods: LIVE & Interactive Episode
September 21 @ 7:00 - 8:30 PM ET
Save your seat👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e11


Top 5 Threat Hunting Headlines - 28 Aug 2023
THE DFIR REPORT: Real Intrusions by Real Attackers, The Truth Behind the Intrusion

• https://thedfirreport.com/2023/08/28/html-smuggling-leads-to-domain-wide-ransomware/

Weak Password Report 2023

• https://specopssoft.com/wp-content/uploads/2023/06/Specops-Software-Weak-Pwd-report-2023.pdf

TUNNEL WARFARE: EXPOSING DNS TUNNELING CAMPAIGNS USING GENERATIVE MODELS – COINLOADER CASE STUDY

• https://research.checkpoint.com/2023/tunnel-warfare-exposing-dns-tunneling-campaigns-using-generative-models-coinloader-case-study/

Public Sector Cybersecurity | Why State & Local Governments Are at Risk

• https://www.sentinelone.com/blog/why-the-public-sector-under-attack-understanding-the-cyber-risks-of-state-local-governments/

LEAKED LOCKBIT 3.0 RANSOMWARE BUILDER USED BY MULTIPLE THREAT ACTORS

• https://securityaffairs.com/149941/hacking/lockbit-3-leaked-code-usage.html?web_view=true

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

Cuba Ransomware Deploys New Tools: Targets Critical Infrastructure Sector in the U.S. and IT Integrator in Latin America

• https://blogs.blackberry.com/en/2023/08/cuba-ransomware-deploys-new-tools-targets-critical-infrastructure-sector-in-the-usa-and-it-integrator-in-latin-america

Hunting Rituals #1: Threat hunting for DLL side-loading

• https://www.group-ib.com/blog/hunting-rituals-dll-side-loading/

Suspected N. Korean Hackers Target S. Korea-US Drills

• https://www.securityweek.com/suspected-n-korean-hackers-target-s-korea-us-drills/?web_view=true

Ransomware Diaries: Volume 3 – LockBit’s Secrets

• https://analyst1.com/ransomware-diaries-volume-3-lockbits-secrets/

Add 'writing malware' to the list of things generative AI is not very good at doing

• https://www.theregister.com/2023/08/18/ai_malware_truth/?&web_view=true

-----


Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

Top 5 Threat Hunting Headlines - 14 Aug 2023
Common TTPs of attacks against industrial organizations. Implants for uploading data

• https://ics-cert.kaspersky.com/publications/reports/2023/08/10/common-ttps-of-attacks-against-industrial-organizations-implants-for-uploading-data/

LOLEKHosted admin arrested for aiding Netwalker ransomware gang

• https://www.bleepingcomputer.com/news/security/lolekhosted-admin-arrested-for-aiding-netwalker-ransomware-gang/

Common TTPs of attacks against industrial organizations. Implants for gathering data

• https://ics-cert.kaspersky.com/publications/reports/2023/07/31/common-ttps-of-attacks-against-industrial-organizations-implants-for-gathering-data/

Cyber Security Managed Services Market Size to Surpass USD 32.68 Billion by 2030, exhibiting a CAGR of 11%

• https://finance.yahoo.com/news/cyber-security-managed-services-market-103300543.html?guccounter=1&guce_referrer=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8&guce_referrer_sig=AQAAAA1fTv2lo_rVQIHBM2wglbg5chdCCT7rK7kUqY_axedRgK0KGQ96r9PingQQLhlCNAIB48vHexq3jonQ33r4p8t9g4FjQquQoyha_ve0obAu115cNL3Hqzw0N9DdDxLRXzhznwFgEfPYNdw2hDlNIU-10J2JzxE6xujJtzLMfNQi

GitHub- onhexgroup/Conferences

• https://github.com/onhexgroup/Conferences/tree/main

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

Come see us at Black Hat USA 2023 @ Booth #2817 as we unveil the future of threat hunting! With a myriad of unique activities, insightful discussions, and special offers, Cyborg Security has something in store for everyone 👇
https://info.cyborgsecurity.com/blackhat2023events?utm_campaign=3rd%20Party%20Event%20|%20Black%20Hat%20USA%202023&utm_content=258414485&utm_medium=social&utm_source=linkedin&hss_channel=lcp-37377305

-----

Top 5 Threat Hunting Headlines - 31 July 2023

Israel's largest oil refinery website offline after DDoS attack

• https://www.bleepingcomputer.com/news/security/israels-largest-oil-refinery-website-offline-after-ddos-attack/?&web_view=true

Linux version of Abyss Locker ransomware targets VMware ESXi servers

• https://www.bleepingcomputer.com/news/security/linux-version-of-abyss-locker-ransomware-targets-vmware-esxi-servers/?&web_view=true

Dark Power Ransomware Abusing Vulnerable Dynamic-Link Libraries in Resolved API Flow

• https://heimdalsecurity.com/blog/dark-power-vulnerable-dlls/?web_view=true

The Nightmare Of Destructive Malware | From Wiper To SwiftSlicer

• https://www.sentinelone.com/blog/the-nightmare-of-destructive-malware-from-wiper-to-swiftslicer/

BlueBravo Adapts to Target Diplomatic Entities with GraphicalProton Malware

• https://www.recordedfuture.com/bluebravo-adapts-to-target-diplomatic-entities-with-graphicalproton-malware

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

Come see us at Black Hat USA 2023 @ Booth #2817 as we unveil the future of threat hunting! With a myriad of unique activities, insightful discussions, and special offers, Cyborg Security has something in store for everyone.

-----

Top 5 Threat Hunting Headlines - 24 July 3023
Sachkov's Revenge: Jailed On Treason Charges, A Russian Cybersecurity Exec Goes On The Offensive

• https://www.rferl.org/a/32472306.html

Deconstructing PowerShell Obfuscation in Malspam Campaigns

• https://www.sentinelone.com/blog/deconstructing-powershell-obfuscation-in-malspam-campaigns/

Clop gang to earn over $75 million from MOVEit extortion attacks

• https://www.bleepingcomputer.com/news/security/clop-gang-to-earn-over-75-million-from-moveit-extortion-attacks/?&web_view=true

First Known Targeted OSS Supply Chain Attacks Against the Banking Sector

• https://checkmarx.com/blog/first-known-targeted-oss-supply-chain-attacks-against-the-banking-sector/

Attackers intensify DDoS attacks with new tactics

• https://www.helpnetsecurity.com/2023/07/21/ddos-attacks-h1-2023/?web_view=true

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

Come see us at Black Hat USA 2023 @ Booth #2817 as we unveil the future of threat hunting! With a myriad of unique activities, insightful discussions, and special offers, Cyborg Security has something in store for everyone.

------------

To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh

------------

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc