VTPRACTITIONERS{ACRONIS}: Tracking FileFix, Shadow Vector, and SideWinder
Introduction We have recently started a new blog series called #VTPRACTITIONERS. This series aims to share with the community what other practitioners are able to research using VirusTotal from a technical point of view. Our first blog saw our colleagues at SEQRITE tracking UNG0002, Silent Lynx, and DragonClone. In this new post, Acronis Threat Research […] more…Microsoft to tap Anthropic for Office 365 as enterprises weigh risks of AI lock-in
Microsoft is reportedly preparing to integrate Anthropic’s AI models into Office 365, marking a shift from its longstanding reliance on OpenAI technology. The addition would bring Anthropic’s capabilities into productivity tools such as Word, Excel, Outlook, and PowerPoint, expanding the range of AI options available to customers, according to a report from The Information. The […] more…APT43: An investigation into the North Korean group’s cybercrime operations
Introduction As recently reported by our Mandiant’s colleagues, APT43 is a threat actor believed to be associated with North Korea. APT43’s main targets include governmental institutions, research groups, think tanks, business services, and the manufacturing sector, with most victims located in the United States and South Korea. The group uses a variety of techniques and […] more…Tracking the Decline of Top Exploit Kits
The latter half of 2016 saw a major shift in the exploit kit landscape, with many established kits suddenly dropping operations or switching business models. Angler, which has dominated the market since 2015, suddenly went silent. We tracked 3.4 million separate Angler attacks on our clients in the first quarter of 2016, and the rate […] more…More information
- App turns old iPhones, iPads into a home security system
- Bug, not DDoS, took down US court systems – just like Gmail
- New York Man Admits to Role in Cybercrime Operation
- Serious Chrome zero-day – Google says update “right this minute”
- Dependency Confusion Could Have Led to RCE in Google Cloud Platform
- Experimental malware uses inaudible sound to defeat network air gaps
- McAfee’s 2013 Consumer Threat Predictions
- Cisco Unified Communications Manager CVE-2019-12716 Cross Site Scripting Vulnerability
- Suspected Mariposa botnet mastermind goes on trial
- CIA Reportedly Planning Cyber Attack Against Russia