Tag: SOC Prime Platform

Raspberry Robin Malware Detection: Enhanced Worm-Like Version Attacking European Financial Institutions 3 min read CVEs Raspberry Robin Malware Detection: Enhanced Worm-Like Version Attacking European Financial Institutions by Daryna Olyniychuk Turla Activity Detection: russian Cyberespionage Group Targeting Ukraine Uses Decade-Old USB-Delivered Andromeda Malware to Spread Novel Backdoors 4 min read CVEs Turla Activity Detection: russian Cyberespionage Group Targeting Ukraine Uses Decade-Old USB-Delivered Andromeda Malware to Spread Novel Backdoors by Veronika Zahorulko SOC Prime Introduces The Prime Hunt 5 min read SIEM & EDR SOC Prime Introduces The Prime Hunt by Veronika Zahorulko BlueNoroff Group Activity Detection: Threat Actors Apply Novel Methods to Bypass Windows Mark-of-the-Web (MoTW) Protection 4 min read CVEs BlueNoroff Group Activity Detection: Threat Actors Apply Novel Methods to Bypass Windows Mark-of-the-Web (MoTW) Protection by Veronika Zahorulko IcedID Botnet Detection: Malvertising Attacks Abusing Google Pay-Per-Click (PPC) Ads 4 min read CVEs IcedID Botnet Detection: Malvertising Attacks Abusing Google Pay-Per-Click (PPC) Ads by Veronika Zahorulko OWASSRF Exploit Detection: New Exploit Method Abuses Exchange Servers to Bypass ProxyNotShell (CVE-2022-41040 and CVE-2022-41082) Mitigations and Gain RCE 4 min read CVEs OWASSRF Exploit Detection: New Exploit Method Abuses Exchange Servers to Bypass ProxyNotShell (CVE-2022-41040 and CVE-2022-41082) Mitigations and Gain RCE by Daryna Olyniychuk Trident Ursa aka Gamaredon APT Attack Detection: Russia-Backed Hackers Escalate Offensive Activity by Targeting a Petroleum Refinery in a NATO Country  5 min read CVEs Trident Ursa aka Gamaredon APT Attack Detection: Russia-Backed Hackers Escalate Offensive Activity by Targeting a Petroleum Refinery in a NATO Country  by Veronika Zahorulko FateGrab/StealDeal Detection: Phishing Attacks by the UAC-0142 Group Against Ukrainian Government Entities Targeting DELTA Users  3 min read CVEs FateGrab/StealDeal Detection: Phishing Attacks by the UAC-0142 Group Against Ukrainian Government Entities Targeting DELTA Users  by Veronika Zahorulko Detecting Fantasy Data Wiper Leveraged by Agrius APT in a Supply-Chain Attack 3 min read CVEs Detecting Fantasy Data Wiper Leveraged by Agrius APT in a Supply-Chain Attack by Daryna Olyniychuk SOC Prime Threat Bounty —  November 2022 Results 3 min read SOC Prime Threat Bounty —  November 2022 Results by Alla Yurchenko