2024-09-18 06:56 UTC
Other
Other
Storm clouds on the horizon: Resurgence of TeamTNT?
Investigations into recent campaigns may suggest the reemergence of TeamTNT in 2023 to present day, since evaporating in 2022.
P0
LATEST
Aggregated cybersecurity reporting, advisories and research. 145 matching records.
AUTO-POLL // 2026-10-04 09:45 UTC
CYBER INTEL TEMPERATURE
TODAY'S AGGREGATED INTELLIGENCE
COOL
COOL
WARM
ELEVATED
HOT
CRITICAL
P9 / P100
7-DAY C.I.T. REPORT
CYBER CONDITIONS // DAILY C.I.T. READINGS
TODAY → 6 DAYS AGO
TODAY
Oct 4
RANSOMWARE
P9
COOL // 5 ARTICLES
SAT
Oct 3
RANSOMWARE
P4
COOL // 14 ARTICLES
FRI
Oct 2
RANSOMWARE
P7
COOL // 46 ARTICLES
THU
Oct 1
RANSOMWARE
P8
COOL // 63 ARTICLES
WED
Sep 30
RANSOMWARE
P10
WARM // 59 ARTICLES
TUE
Sep 29
RANSOMWARE
P4
COOL // 68 ARTICLES
MON
Sep 28
RANSOMWARE
P7
COOL // 52 ARTICLES
2024-09-16 06:55 UTC
Other
Other
Concealed networks: Are dark web syndicates turning to social media for cybercrime?
Group-IB dark web investigations: To avoid prying eyes, find out how adversaries increasingly shift from the dark web to social media to execute attacks, leak credentials, share exploitable vulnerabilities, and more.
P0
2024-06-17 00:00 UTC
Other
Other
GCP HMAC Keys are not discoverable or revokable other than for self
GCP administrators face challenges in managing HMAC keys within their organizations, lacking visibility into which user accounts have generated these keys and whether they are actively being used to access storage objects. Additionally, there's a lack of functionality to revoke keys associated with other users, restricting their ability to enforce security policies effectively. Similarly, GCP incident response teams rely on Cloud Logging to monitor Cloud Storage object access, but they lack spe…
P0
2024-05-13 00:00 UTC
Security Journalism
Security Journalism
Active Remediation: Proactive Response with Huntress Managed EDR | Huntress
Learn how you can streamline incident response with Huntress Managed EDR's Active Remediation. Sleep soundly while we thwart threats on your behalf.
P0
2024-05-03 00:00 UTC
Security Journalism
Security Journalism
Healthcare Held Hostage: Fighting the Plague of Ransomware | Huntress
Ransomware is spreading like wildfire. Learn about its growing threat to healthcare, its impact on patient care, and how Huntress managed solutions can better protect your organization from cyberattacks.
P15
2024-02-29 00:00 UTC
Security Journalism
Security Journalism
Attacking MSSQL Servers, Pt. II | Huntress
The publication of the first blog post led a Huntress SOC analyst to identify and escalate a second, similar incident. A deeper investigation into the activity made it clear that the Huntress SOC had obviated several Trigona ransomware attacks, protecting customers from the impact of a ransomware infection.
P15
2023-11-08 07:59 UTC
Other
Other
Ransomware manager: Investigation into farnetwork, a threat actor linked to five strains of ransomware
Take a deep dive into the operations of one of the most active players in the Ransomware-as-a-Service market.
P15
2023-10-24 08:28 UTC
Other
Other
The untold story of incident response: Insider’s Gambit
Get a close look at details of the most notable cases faced by Group-IB’s Digital Forensics and Incident Response (DFIR) team
P0
2023-10-16 10:04 UTC
Other
Other
The untold story of incident response: A Christmas Miracle
Twas the night before Christmas, when out came the cry, a cyberattack is happening, so stop them, won’t you try?
P0
2023-09-18 07:28 UTC
Other
Other
Incident Response through an opportunity lens: In conversation with Dmitry Volkov (CEO, Group-IB)
Gather valuable insights on how incident response can be a make-or-break factor in securing your business.
P0
2023-04-21 03:56 UTC
Other
Other
Investigation into PostalFurious: a Chinese-speaking phishing gang targeting Singapore and Australia
How to investigate phishing campaigns
P0
2023-01-19 00:00 UTC
Security Journalism
Security Journalism
The Methods Behind a Huntress Managed Antivirus Investigation | Huntress
In this blog, we’ll go on a short journey of how we dissected a vague Managed Antivirus alert and offer some ideas and methods for security analysts.
P0
2022-11-29 00:00 UTC
Security Journalism
Security Journalism
Incident Response: A Choose Your Own Adventure Exercise
Incident response is a lot like a choose your own adventure exercise. We cover the ground rules and talk about some incidents we’ve helped partners with.
P0
2022-10-19 11:52 UTC
Other
Other
Deadbolt ransomware decryption: unlock your data
The Group-IB Incident Response Team investigated an incident related to a DeadBolt attack and analyzed a DeadBolt ransomware sample
P15
2022-08-16 00:00 UTC
Security Journalism
Security Journalism
Gifting User Passwords to Adversaries With NPPSPY | Huntress
We unravel an investigation that details one way threat actors are able to gather cleartext passwords via NPPSPY.
P0
2022-07-26 00:00 UTC
Security Journalism
Security Journalism
Practical Tips for Conducting Digital Forensics Investigations | Huntress
A digital forensics investigation can be tedious. Fortunately, there are some efficient ways that you can still achieve success as an investigator.
P0
2022-06-14 00:00 UTC
Security Journalism
Security Journalism
Triangulation | Huntress
This blog dives into triangulation as a guiding concept during investigations and reporting.
P0
2021-11-17 00:00 UTC
Security Journalism
Security Journalism
Investigating Unauthorized Access | Huntress
Learn about our investigation regarding unauthorized access to our QA and product testing environment.
P0
2021-01-12 00:00 UTC
Security Journalism
Security Journalism
Malware Under The Microscope: Manual Analysis
Learn manual malware analysis techniques used by threat researchers. Explore static & dynamic analysis, reverse engineering tools, and real-world investigation methods.
P0
2020-07-05 13:51 UTC
Other
Other
Digital forensics specialist’s bookshelf
Top 11 books on digital forensics, incident response, and malware analysis
P0
2020-04-28 14:27 UTC
Other
Other
Reconstructing User Activity for Forensics with FeatureUsage
Useful feature that can help forensic analysts and incident responders to reconstruct user activities.
P0
2019-12-11 14:37 UTC
Other
Other
Hunting for Attacker’s Tactics and Techniques With Prefetch Files
Windows Prefetch files were introduced in Windows XP and since that time have helped digital forensics analysts and incident responders find evidence of execution.
P0
2019-11-07 12:14 UTC
Other
Other
WhatsApp in Plain Sight: Where and How You Can Collect Forensic Artifacts
All about WhatsApp forensics and the wealth of data extracted from a device through forensic analysis.
P0
2019-09-26 09:56 UTC
Other
Other
Tools up: the best software and hardware tools for computer forensics
Igor Mikhailov gave his review of the best software and hardware solutions for computer forensics.
P0
2017-05-08 18:00 UTC
Security Journalism
Security Journalism
MSP Moment: Squashing an MSSQL Attack
When it comes to breaches, it’s hard to find a silver lining when the end result is customer down time, data theft, or damaged reputations. For Managed Service Providers with tens to hundreds (or even thousands) of clients, the stakes are even higher. In this MSP Moment, we’re highlighting how NTConnections, a Washington DC based MSP, responded to a database outage which quickly escalated into an incident response effort.
P0