Out of the Woods: The Threat Hunting Podcast

**Out of the Woods LIVE Episode
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10

-----

Top 5 Threat Hunting Headlines - 10 July 3023
A man from Tracy, California, has been charged with a computer attack on the Discovery Bay water treatment facility

• https://securityaffairs.com/148258/cyber-crime/discovery-bay-water-treatment-facility-attck.html?web_view=true

June's Cyber Battleground: Decoding Ransomware and APT Attacks in Europe

• https://threatmon.io/wp-content/uploads/2023/07/junes-cyber-battleground-decoding-ransomware-and-apt-attacks-in-europe.pdf

Killnet as a private military hacking company? For now, it's probably just a dream

• https://therecord.media/killnet-cybercrime-group-russia-kremlin-hacking-company?&web_view=true

Neo_Net | The Kingpin of Spanish eCrime

• https://www.sentinelone.com/blog/neo_net-the-kingpin-of-spanish-ecrime/

Vishing Goes High-Tech: New 'Letscall' Malware Employs Voice Traffic Routing

• https://thehackernews.com/2023/07/vishing-goes-high-tech-new-letscall.html?&web_view=true

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

**Out of the Woods LIVE Episode
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10

-----

Top 5 Threat Hunting Headlines - 03 July 3023
Torrent of image-based phishing emails are harder to detect and more convincing

• https://arstechnica.com/security/2023/06/torrent-of-image-based-phishing-emails-are-harder-to-detect-and-more-convincing/?&web_view=true

Cyber Security Market to Reach $500.70 Billion by 2030: Grand View Research, Inc.

• https://finance.yahoo.com/news/cyber-security-market-reach-500-103000232.html?guccounter=1&guce_referrer=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbS8&guce_referrer_sig=AQAAAA1fTv2lo_rVQIHBM2wglbg5chdCCT7rK7kUqY_axedRgK0KGQ96r9PingQQLhlCNAIB48vHexq3jonQ33r4p8t9g4FjQquQoyha_ve0obAu115cNL3Hqzw0N9DdDxLRXzhznwFgEfPYNdw2hDlNIU-10J2JzxE6xujJtzLMfNQi

DNS TXT Records Can Be Used by Hackers to Execute Malware

• https://cybersecuritynews.com/dns-txt-records-to-execute-malware/

The DPRK strikes using a new variant of RUSTBUCKET

• https://www.elastic.co/security-labs/DPRK-strikes-using-a-new-variant-of-rustbucket

Malvertising Used as Entry Vector for BlackCat, Actors Also Leverage SpyBoy Terminator

• https://www.trendmicro.com/en_us/research/23/f/malvertising-used-as-entry-vector-for-blackcat-actors-also-lever.html

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

**Threat Hunting: Shifting Gears in Query Tuning
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears

**Out of the Woods LIVE Episode
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10

-----

Top 5 Threat Hunting Headlines - 26 June 2023
BEYOND THE HORIZON: TRAVELING THE WORLD ON CAMARO DRAGON’S USB FLASH DRIVES

• https://research.checkpoint.com/2023/beyond-the-horizon-traveling-the-world-on-camaro-dragons-usb-flash-drives/

Microsoft Teams Flaw Sends Malware to Employees’ Inboxes

PindOS: New JavaScript Dropper Delivering Bumblebee and IcedID

• https://www.deepinstinct.com/blog/pindos-new-javascript-dropper-delivering-bumblebee-and-icedid

Technical Analysis of RDPCredentialStealer: Uncovering Malware Targeting RDP Credentials with API Hooking

• https://threatmon.io/wp-content/uploads/2023/06/Technical_Analysis_of_RDPCredentialStealer_Uncovering_Malware_Targeting.pdf

US Military Personnel Targeted by Unsolicited Smartwatches Linked to Data Breaches

• https://www.hackread.com/us-military-unsolicited-smartwatches-data-breach/?web_view=true

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

**Threat Hunting: Shifting Gears in Query Tuning
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears

**Out of the Woods LIVE Episode
July 20th @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e10

-----

Top 5 Threat Hunting Headlines - 20 June 2023
Skuld: The Infostealer that Speaks Golang

https://www.trellix.com/en-us/about/newsroom/stories/research/skuld-the-infostealer-that-speaks-golang.html

Fulfilling Expected SEC Requirements for Cybersecurity Expertise at Board Level

https://www.securityweek.com/fulfilling-expected-sec-requirements-for-cybersecurity-expertise-at-board-level/

Mystic Stealer – Evolving “stealth” Malware

https://www.cyfirma.com/outofband/mystic-stealer-evolving-stealth-malware/

2 Cybersecurity Stocks You Can Buy and Hold for the Next Decade

https://www.fool.com/investing/2023/06/20/2-cybersecurity-stocks-you-can-buy-and-hold-for-th/

Over 100,000 Stolen ChatGPT Account Credentials Sold on Dark Web Marketplaces

https://thehackernews.com/2023/06/over-100000-stolen-chatgpt-account.html

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

**Threat Hunting: Shifting Gears in Query Tuning
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears

-----

Top 5 Threat Hunting Headlines - 05 June 2023
The DFIR Report - A Truly Graceful Wipe Out

https://thedfirreport.com/2023/06/12/a-truly-graceful-wipe-out/

Data Breach Impacts MN Department of Education
https://www.kare11.com/article/news/local/data-breach-minnesota-department-of-education/89-5b573d53-05ef-4453-882b-167770287aa1

Cybercriminals Using Powerful BatCloak Engine to Make Malware Fully Endetectable
https://thehackernews.com/2023/06/cybercriminals-using-powerful-batcloak.html

Barracuda Urges Customers to Replace Vulnerable Appliances Immediately

https://www.csoonline.com/article/3699135/barracuda-urges-customers-to-replace-vulnerable-appliances-immediately.html

SaaS Ransomware Observed in the Wild for Sharepoint in Microsoft 365

https://www.obsidiansecurity.com/blog/saas-ransomware-observed-sharepoint-microsoft-365/

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

**Threat Hunting: Shifting Gears in Query Tuning
June 28th @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/shifting-gears
-----

Top 5 Threat Hunting Headlines - 05 June 2023
Investigating BlackSuit Ransomware’s Similarities to Royal

https://www.trendmicro.com/en_us/research/23/e/investigating-blacksuit-ransomwares-similarities-to-royal.html

The DFIR Report - IcedID Macro Ends in Nokoyawa Ransomware

https://thedfirreport.com/2023/05/22/icedid-macro-ends-in-nokoyawa-ransomware/

Carbon Black’s TrueBot Detection

https://blogs.vmware.com/security/2023/06/carbon-blacks-truebot-detection.html

Inside the Mind of a Cyber Attacker | Tactics, Techniques, and Procedures (TTPs) Every Security Practitioner Should Know

https://www.sentinelone.com/blog/inside-the-mind-of-a-cyber-attacker-tactics-techniques-and-procedures-ttps-every-security-practitioner-should-know/

New MOVEit Transfer zero-day mass-exploited in data theft attacks

https://www.bleepingcomputer.com/news/security/new-moveit-transfer-zero-day-mass-exploited-in-data-theft-attacks/?&web_view=true

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

**Threat Hunting Workshop: Hunting for Exfiltration
May 31 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-8
------------

To be fully interactive by asking questions and giving feedback and opinions in real-time, join our Discord Server! Be sure to join the live recording of our next episode to be a part of the fun! --> https://discord.gg/sHw5c3qwRh

------------

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

In the ever-evolving cybersecurity battlefield, organizations need to balance internal security tasks with outside expertise. That’s where hybrid hunting comes in – the powerful model that lets you divide security tasks between your internal team and an MSSP to create an unbeatable threat detection and response force.

In this bonus episode, our expert speakers, Scott Poley (Senior Threat Hunter, Cyborg Security) and Justin Heard (Threat Intelligence Manager, Nuspire) dive into a comprehensive overview of the latest trends in hybrid hunting and practical guidance on program development and management.

Watch the full video recording 👇
https://www.cyborgsecurity.com/our-webinars/hybrid-hunting-threat-hunting-in-the-managed-security-battlespace/

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

**Top Cover - Threat Hunting Management Workshop: Reporting & Communication
May 24 @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-3

**Threat Hunting Workshop: Hunting for Exfiltration
May 31 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-8

**[LIVE] Out of the Woods: The Threat Hunting Podcast
Submit Question -> [email protected]
May 18 @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e9

-----

Top 5 Threat Hunting Headlines - 08 May 2023
Deconstructing Amadey’s Latest Multi-Stage Attack and Malware Distribution

https://www.mcafee.com/blogs/other-blogs/mcafee-labs/deconstructing-amadeys-latest-multi-stage-attack-and-malware-distribution/


San Bernardino County Sheriff’s Department paid a $1.1M ransom

https://securityaffairs.com/145892/cyber-crime/san-bernardino-county-sheriff-paid-ransom.html

Kimsuky Evolves Reconnaissance Capabilities in New Global Campaign

https://www.sentinelone.com/labs/kimsuky-evolves-reconnaissance-capabilities-in-new-global-campaign/


SolarWinds hack: Did DOJ know 6 months earlier?

https://www.reversinglabs.com/blog/secure-software-blogwatch-solarwinds


ALPHV gang claims ransomware attack on Constellation Software

https://www.bleepingcomputer.com/news/security/alphv-gang-claims-ransomware-attack-on-constellation-software/

-----

Show Notes: https://info.cyborgsecurity.com/hubfs/Out%20of%20the%20Woods/Shownotes/OOTW%20Shownotes%2005-08-2023.pdf

-----

Follow Us!Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc

**Top Cover - Threat Hunting Management Workshop: Reporting & Communication
May 24 @ 12:00 - 12:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/top-cover-3

**Threat Hunting Workshop: Hunting for Exfiltration
May 31 @ 12:00 – 1:00 PM ET 👇
https://info.cyborgsecurity.com/en-us/threat-hunting-workshop-8

**[LIVE] Out of the Woods: The Threat Hunting Podcast
May 18 @ 7:00 - 8:30 PM ET 👇
https://info.cyborgsecurity.com/en-us/threathuntingpodcast-s1e9

-----

Top 5 Threat Hunting Headlines - 01 May 2023
RTM Locker Ransomware as a Service (RaaS) Now Suits Up for Linux Architecture

https://www.uptycs.com/blog/rtm-locker-ransomware-as-a-service-raas-linux

ViperSoftX Updates Encryption, Steals Data

https://www.trendmicro.com/en_us/research/23/d/vipersoftx-updates-encryption-steals-data.html

Unpacking BellaCiao: A Closer Look at Iran’s Latest Malware

https://www.bitdefender.com/blog/businessinsights/unpacking-bellaciao-a-closer-look-at-irans-latest-malware/

Elastic Security Labs Discovers the LOBSHOT Malware

https://www.elastic.co/security-labs/elastic-security-labs-discovers-lobshot-malware

APT28 Targets Ukrainian Government Entities with Fake "Windows Update" Emails

https://thehackernews.com/2023/05/apt28-targets-ukrainian-government.html

-----

Follow Us!
Twitter: https://twitter.com/CyborgSecInc
LinkedIn: https://www.linkedin.com/company/cyborg-security/
YouTube: https://www.youtube.com/cyborgsecurity
Instagram: https://www.instagram.com/cyborgsecinc/
Facebook: https://www.facebook.com/CyborgSecInc