Posts Categorized: Threat Intelligence

Figure 2: One of the ransom notes dropped by HelloKitty as found on VirusTotal

Threat Intelligence

HelloKitty: The Victim’s Perspective

By: Threat Analysis Unit / September 9, 2021

Threat Intelligence

It’s Raining Beacons: Automated Generation of Cobalt Strike Traffic

By: Threat Analysis Unit / June 30, 2021

Threat Intelligence

Integrating MISP with NSX Advanced Threat Analyzer

By: Threat Analysis Unit / June 24, 2021

Figure 3: This attack infection chain, created with VirusTotal Graph, visualizes the relationship between the downloader, its parent RAR archives, and the contacted hosts. The meaning of each node on the graph can be found here.

Threat Intelligence

Don’t Be Fooled by Agent Tesla’s Football Club Red Herring

By: Threat Analysis Unit / June 3, 2021

Bearded IT Technician in Glasses with Laptop Computer and Black Male Engineer Colleague are Using Laptop in Data Center while Working Next to Server Racks. Running Diagnostics or Doing Maintenance Work

Threat Intelligence

Data Center Threats: Turning Remote Access into Money

By: Threat Analysis Unit / May 20, 2021

Threat Intelligence

Threat Landscape Report – Threats Evading Perimeter Defenses

By: Chad Skipper / May 13, 2021

Threat Intelligence

Dridex Reloaded: Analysis of a New Dridex Campaign

By: Threat Analysis Unit / March 29, 2021

Threat Intelligence

Memory Forensics for Virtualized Hosts

By: Threat Analysis Unit / March 25, 2021

Threat Intelligence

Deconstructing Defray777 Ransomware

By: Threat Analysis Unit / March 11, 2021

Threat Intelligence

Phishing Detection Using Perceptual Hashes

By: Tobias Jarmuzek / March 3, 2021

1
2
3
❯