Microsoft Threat Intelligence Podcast

Threat Landscape Update on Grandoreiro and Luna Tempest


Listen Later

On this week's episode of The Microsoft Threat Intelligence Podcast, Sherrod DeGrippo is joined by two of MSTIC’s finest analysts. They discuss recent trends in financially motivated cyber threats observed by Microsoft, focusing particularly on two cases: the Grandoreiro banking Trojan and the Luna Tempest crimeware actor. The Grandoreiro Trojan, active since 2017, has expanded globally beyond its initial Latin American focus, now targeting countries like the U.S. and the UK. This Trojan typically starts with phishing emails to steal financial information. Despite efforts to disrupt this activity, new clusters have emerged. The discussion also covers Luna Tempest, a U.S.- and UK-based extortion group targeting startups and smaller companies, particularly in sectors like insurance, FinTech, and biotech, seeking high payouts by threatening to release sensitive data. 

 

In this episode you’ll learn:      
  • The resilience and adaptability of threat actors in response to global disruption efforts 
  • Why Luna Tempest focuses solely on extortion without deploying ransomware 
  • How the Grandoreiro Banking Trojan has expanded globally  
  •  

    Some questions we ask:     
    • How do we distinguish between the various threat actor groups and their malware? 
    • What can businesses do to protect themselves from identity-based attacks? 
    • Have these cybercriminals perfected an extortion program? 
    •  

      Resources:  

      View Sherrod DeGrippo on LinkedIn  

       

      Related Microsoft Podcasts:                   
      • Afternoon Cyber Tea with Ann Johnson 
      • The BlueHat Podcast 
      • Uncovering Hidden Risks     

         

        Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

        Get the latest threat intelligence insights and guidance at Microsoft Security Insider 

         

        The Microsoft Threat Intelligence Podcast is produced by Microsoft and distributed as part of N2K media network.  

        ...more
        View all episodesView all episodes
        Download on the App Store

        Microsoft Threat Intelligence PodcastBy Microsoft

        • 5
        • 5
        • 5
        • 5
        • 5

        5

        21 ratings


        More shows like Microsoft Threat Intelligence Podcast

        View all
        Risky Business by Patrick Gray

        Risky Business

        364 Listeners

        SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

        SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

        638 Listeners

        Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

        Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

        369 Listeners

        Hacked by Hacked

        Hacked

        180 Listeners

        CyberWire Daily by N2K Networks

        CyberWire Daily

        1,013 Listeners

        Smashing Security by Graham Cluley

        Smashing Security

        317 Listeners

        Click Here by Recorded Future News

        Click Here

        406 Listeners

        Darknet Diaries by Jack Rhysider

        Darknet Diaries

        7,959 Listeners

        Cybersecurity Today by Jim Love

        Cybersecurity Today

        174 Listeners

        CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

        CISO Series Podcast

        189 Listeners

        Hacking Humans by N2K Networks

        Hacking Humans

        316 Listeners

        Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

        Defense in Depth

        77 Listeners

        Cyber Security Headlines by CISO Series

        Cyber Security Headlines

        128 Listeners

        Risky Bulletin by risky.biz

        Risky Bulletin

        43 Listeners

        Hacker And The Fed by Chris Tarbell & Hector Monsegur

        Hacker And The Fed

        169 Listeners