TA558 APT Group Uses Malicious Microsoft Compiled HTML Help Files
Blog The TA558 APT advanced persistent threat group has been observed utilizing malicious Microsoft Compiled HTML Help (.chm) files to deliver malware payloads, targeting sectors such as hospitality and travel. Who is TA558 APT? TA558, a financially-motivated cybercrime group, has been targeting the hospitality, travel, and related industries located in Latin America, North America, and […]
ChatGPT and Cyber Security in 15 Questions: Impacts, Benefits and Harms
Blog ChatGPT and Cyber Security: Discover the impacts, benefits, and potential harms of using ChatGPT in cybersecurity. What is the ChatGPT? ChatGPT is an AI driven chatbot launched by OpenAI in November 2022. ChatGPT is a variant of the GPT (Generative Pre-training Transformer) language model that has been fine-tuned for the task of conversational response […]
Phishing Attack Targeting Turkish Companies
Blog Phishing Attack Targeting Turkish Companies: Turkish companies have been targeted by a phishing campaign involving emails with malicious attachments disguised as RFQ files. Phishing Attack Phishing mail targeting Turkish companies has been detected. Mail attachment contains an RFQ file. Normally, a request for quotation (RFQ) is a company’s document to request pricing and packaging […]
Cyber Security Transformation Steps For Success
Blog Cyber Security Transformation Steps For Success: focusing on building resilient infrastructures and adopting proactive security measures. Cyber Security Transformation Steps Cloud computing has garnered the attention of the Department of Defense as data and computer processing needs grow and budgets shrink. Programs are interested in the potential of cloud computing to control growing data […]
The Internet of Bodies Will Change Everything, for Better or Worse
Blog Examine how the Internet of Bodies (IoB)—the network of connected devices. Internet of Bodies (IoB) Internet-connected devices like smart thermostats, voice-activated assistants, and web-enabled refrigerators have become ubiquitous in American homes. These technologies are part of the Internet of Things (IoT), which has flourished in recent years as consumers and businesses flock to smart […]
Cost Considerations in Cloud Computing
Blog Understand the key cost factors in cloud computing, including infrastructure, data transfer, and maintenance, to help organizations optimize spending and achieve financial efficiency. The Key Cost Factors in Cloud Computing Cloud computing has garnered the attention of the Department of Defense as data and computer processing needs grow and budgets shrink. Programs are interested […]
What is “Cyber Threat”?
Blog The “cyber threat” refers to actions that are deemed malicious and are carried out deliberately or inadvertently by; hackers, criminals, business rivals, spies, dissatisfied workers, organized crime groups, and hactivist societies, in order to obtain unauthorized access, interrupt infrastructure, intercept classified data, and/or share data with third parties. Phishing, 0-day attacks, APT (Advanced Persistent […]
Who is DarkSide Ransomware Group?
Blog Who is DarkSide Ransomware Group? FBI claims attack on the Colonial Pipeline has been attributed to DarkSide Ransomware, a kind of new ransomware family that emerged on the crimeware market at the beginning of November 2020. DarkSide is a Ransomware-as-a-Service with the stated goal of targeting ‘large corporations.’ They are primarily focused on recruiting […]
REvil Ransomware Malware Analysis
Blog REvil ransomware Dive into the technical analysis of REvil ransomware, detailing its encryption methods, attack vectors, and the strategies. 1. Overall Summary The REvil (also known as Sodinokibi) is a Ransomware-as-a-Service (RaaS). The first attack of REvil in the middle of April 2019, got huge attention from the Cyber Security world due to sharing […]
PetitPotam (MS-EFSRPC) Exploit – CVE2021-36942
Blog PetitPotam (MS-EFSRPC) Exploit – Summary PetitPotam Exploit needs Active Directory Certificate Services, specifically the default settings behind the Web Enrollment service because of this Vulnerability. Adversaries can achieve full Domain Admin (DC) takeover of a target Active Directory by using PetitPotam, which takes attention among Ransomware Gangs, they are able to use this Vulnerability […]