Tag: Sigma

SOC Prime Threat Bounty —  January 2023 Results 3 min read SOC Prime Threat Bounty —  January 2023 Results by Alla Yurchenko Remote Utilities Exploitation: New Phishing Campaign by the UAC-0096 Group Targeting Ukrainian Organizations  3 min read CVEs Remote Utilities Exploitation: New Phishing Campaign by the UAC-0096 Group Targeting Ukrainian Organizations  by Veronika Zahorulko Remcos Malware Detection: UAC-0050 Group Targets Ukrainian Government Entities in Phishing Attacks Using Remote Access Software   3 min read CVEs Remcos Malware Detection: UAC-0050 Group Targets Ukrainian Government Entities in Phishing Attacks Using Remote Access Software   by Veronika Zahorulko UAC-0114 Group aka Winter Vivern Attack Detection: Hackers Launch Phishing Campaigns Targeting Government Entities of Ukraine and Poland 4 min read CVEs UAC-0114 Group aka Winter Vivern Attack Detection: Hackers Launch Phishing Campaigns Targeting Government Entities of Ukraine and Poland by Veronika Zahorulko Attackers Exploit Microsoft OneNote Attachments to Steal Credentials and Spread Malware 3 min read CVEs Attackers Exploit Microsoft OneNote Attachments to Steal Credentials and Spread Malware by Daryna Olyniychuk UAC-0082 (Sandworm APT Group) Targets Ukrainian National Information Agency “Ukrinform” in a Series of Cyber Attacks Leveraging Multiple Wiper Malware Strains 3 min read CVEs UAC-0082 (Sandworm APT Group) Targets Ukrainian National Information Agency “Ukrinform” in a Series of Cyber Attacks Leveraging Multiple Wiper Malware Strains by Veronika Zahorulko Rhadamanthys Malware Detection: New Infostealer Spread via Google Ads & Spam Emails to Target Crypto Wallets and Dump Sensitive Information 2 min read CVEs Rhadamanthys Malware Detection: New Infostealer Spread via Google Ads & Spam Emails to Target Crypto Wallets and Dump Sensitive Information by Daryna Olyniychuk CVE-2022-42475 Detection: Zero-Day Vulnerability in FortiOS SSL-VPN Exploited in Attacks Against Government Entities and Large Organizations 4 min read CVEs CVE-2022-42475 Detection: Zero-Day Vulnerability in FortiOS SSL-VPN Exploited in Attacks Against Government Entities and Large Organizations by Veronika Zahorulko SOC Prime Threat Bounty —  December 2022 Results 3 min read SOC Prime Threat Bounty —  December 2022 Results by Alla Yurchenko Raspberry Robin Malware Detection: Enhanced Worm-Like Version Attacking European Financial Institutions 3 min read CVEs Raspberry Robin Malware Detection: Enhanced Worm-Like Version Attacking European Financial Institutions by Daryna Olyniychuk