Tag: Sigma

SOC Prime Threat Bounty —  April 2023 Results 4 min read SOC Prime Threat Bounty —  April 2023 Results by Alla Yurchenko CVE-2023-25717 Detection: New Malware Botnet AndoryuBot Exploits RCE Flaw in the Ruckus Wireless Admin Panel 3 min read Latest Threats CVE-2023-25717 Detection: New Malware Botnet AndoryuBot Exploits RCE Flaw in the Ruckus Wireless Admin Panel by Veronika Telychko Detecting Abused Legitimate Tools Applied by Hackers in the Human-Operated Ransomware Attacks 4 min read Latest Threats Detecting Abused Legitimate Tools Applied by Hackers in the Human-Operated Ransomware Attacks by Veronika Telychko SmokeLoader Malware Detection: UAC-0006 Group Reemerges to Launch Phishing Attacks Against Ukraine Using Financial Subject Lures 3 min read Latest Threats SmokeLoader Malware Detection: UAC-0006 Group Reemerges to Launch Phishing Attacks Against Ukraine Using Financial Subject Lures by Veronika Telychko ROKRAT Detection: Malware Adopts New Deployment Methods Relying on Large LNK Files 3 min read Latest Threats ROKRAT Detection: Malware Adopts New Deployment Methods Relying on Large LNK Files by Daryna Olyniychuk WinRAR as Cyberweapon: UAC-0165 Targets Ukrainian Public Sector with RoarBat 3 min read Latest Threats WinRAR as Cyberweapon: UAC-0165 Targets Ukrainian Public Sector with RoarBat by Daryna Olyniychuk APT28 aka UAC-0001 Group Leverages Phishing Emails Disguised As Instructions for OS Updates Targeting Ukrainian State Bodies 3 min read Latest Threats APT28 aka UAC-0001 Group Leverages Phishing Emails Disguised As Instructions for OS Updates Targeting Ukrainian State Bodies by Daryna Olyniychuk CVE-2023-27524 Detection: New Vulnerability Exposes Thousands of Apache Superset Servers to RCE Attacks 3 min read Latest Threats CVE-2023-27524 Detection: New Vulnerability Exposes Thousands of Apache Superset Servers to RCE Attacks by Veronika Telychko CVE-2023-27350 Exploit Detection: Critical PaperCut RCE Vulnerability Added to the CISA’s Known Exploited Vulnerabilities Catalog 3 min read Latest Threats CVE-2023-27350 Exploit Detection: Critical PaperCut RCE Vulnerability Added to the CISA’s Known Exploited Vulnerabilities Catalog by Daryna Olyniychuk Domino Malware Detection: Ex-Conti and FIN7 Threat Actors Collaborate to Spread a New Backdoor 4 min read Latest Threats Domino Malware Detection: Ex-Conti and FIN7 Threat Actors Collaborate to Spread a New Backdoor by Veronika Telychko