← Back to Blog

Tag: Sigma

SOC Prime Threat Bounty — August 2022 Results 3 min read SOC Prime Threat Bounty — August 2022 Results by Alla Yurchenko Raspberry Robin Malware Detection: New Connections Revealed 2 min read CVEs Raspberry Robin Malware Detection: New Connections Revealed by Anastasiia Yevdokimova AgentTesla Spyware Massively Distributed in Phishing Campaigns Targeting Ukrainian, Austrian, and German Organizations 3 min read CVEs AgentTesla Spyware Massively Distributed in Phishing Campaigns Targeting Ukrainian, Austrian, and German Organizations by Veronika Zahorulko HYPERSCRAPE Detection: Iranian Cyberespionage Group APT35 Uses a Custom Tool to Steal User Data 3 min read CVEs HYPERSCRAPE Detection: Iranian Cyberespionage Group APT35 Uses a Custom Tool to Steal User Data by Veronika Zahorulko SOC Prime Threat Bounty — July 2022 Results 4 min read SOC Prime Threat Bounty — July 2022 Results by Alla Yurchenko Zeppelin Ransomware Detection: CISA and FBI Issue a Joint Advisory for Enhanced Protection Against RaaS Threats 4 min read CVEs Zeppelin Ransomware Detection: CISA and FBI Issue a Joint Advisory for Enhanced Protection Against RaaS Threats by Veronika Zahorulko BlueSky Ransomware Detection: Targets Windows Hosts and Leverages Multithreading for Faster Encryption 4 min read CVEs BlueSky Ransomware Detection: Targets Windows Hosts and Leverages Multithreading for Faster Encryption by Veronika Zahorulko Cuba Ransomware Detection: Tropical Scorpius Threat Actors Deploy Novel RAT Malware in Targeted Attacks 5 min read CVEs Cuba Ransomware Detection: Tropical Scorpius Threat Actors Deploy Novel RAT Malware in Targeted Attacks by Veronika Zahorulko Armageddon APT aka UAC-0010 Uses GammaLoad and GammaSteel Malware in Targeted Cyber-Attacks on Ukraine 3 min read CVEs Armageddon APT aka UAC-0010 Uses GammaLoad and GammaSteel Malware in Targeted Cyber-Attacks on Ukraine by Veronika Zahorulko CVE-2022-27925 Detection: Mass Exploitation of Remote Code Execution (RCE) Vulnerability in Zimbra Collaboration Suite 3 min read CVEs CVE-2022-27925 Detection: Mass Exploitation of Remote Code Execution (RCE) Vulnerability in Zimbra Collaboration Suite by Veronika Zahorulko