Tag: Sigma

UAC-0173 Attacks: Ukrainian Judicial Bodies and Notary Massively Targeted With AsyncRAT Malware 3 min read Latest Threats UAC-0173 Attacks: Ukrainian Judicial Bodies and Notary Massively Targeted With AsyncRAT Malware by Daryna Olyniychuk SOC Prime on Discord: Join a Single Community for All Cyber Defenders to Benefit from Shared Expertise 3 min read SOC Prime Platform SOC Prime on Discord: Join a Single Community for All Cyber Defenders to Benefit from Shared Expertise by Veronika Telychko CVE-2023-3519 Detection: RCE Zero-Day in Citrix NetScaler ADC and NetScaler Gateway Exploited in the Wild 3 min read Latest Threats CVE-2023-3519 Detection: RCE Zero-Day in Citrix NetScaler ADC and NetScaler Gateway Exploited in the Wild by Daryna Olyniychuk Adversaries Use Weaponized PDFs Disguised as German Embassy Lures to Spread Duke Malware Variant in Attacks Against Ministries of Foreign Affairs of NATO-Aligned Countries  3 min read Latest Threats Adversaries Use Weaponized PDFs Disguised as German Embassy Lures to Spread Duke Malware Variant in Attacks Against Ministries of Foreign Affairs of NATO-Aligned Countries  by Veronika Telychko Okta & Splunk Integration Guide 6 min read SIEM & EDR Okta & Splunk Integration Guide by Oleksandra Rumiantseva New MerlinAgent Open-Source Tool Used by UAC-0154 Group to Target Ukrainian State Agencies 3 min read Latest Threats New MerlinAgent Open-Source Tool Used by UAC-0154 Group to Target Ukrainian State Agencies by Veronika Telychko Google AMP Exploited in Phishing Attacks Targeting Enterprise Users 2 min read Latest Threats Google AMP Exploited in Phishing Attacks Targeting Enterprise Users by Veronika Telychko Detect CVE-2023-35078 Exploitation: Critical Authentication Bypass Zero-Day in Ivanti Endpoint Manager Mobile (EPMM) 3 min read Latest Threats Detect CVE-2023-35078 Exploitation: Critical Authentication Bypass Zero-Day in Ivanti Endpoint Manager Mobile (EPMM) by Daryna Olyniychuk Detecting SmokeLoader Campaign: UAC-0006 Keep Targeting Ukrainian Financial Institutions in a Series of Phishing Attacks 2 min read Latest Threats Detecting SmokeLoader Campaign: UAC-0006 Keep Targeting Ukrainian Financial Institutions in a Series of Phishing Attacks by Daryna Olyniychuk Mallox Ransomware Detection: Increasing Attacks Abusing MS-SQL Servers 2 min read Latest Threats Mallox Ransomware Detection: Increasing Attacks Abusing MS-SQL Servers by Veronika Telychko