PoetRAT: a complete lack of operational security. [Research Saturday]
CyberWire Daily7 Marras 2020

PoetRAT: a complete lack of operational security. [Research Saturday]

Cisco Talos discovered PoetRAT earlier this year. Since then, they observed multiple new campaigns indicating a change in the actor's capabilities and showing their maturity toward better operational security. They assess with medium confidence this actor continues to use spear-phishing attacks to lure a user to download a malicious document from temporary hosting providers. They currently believe the malware comes from malicious URLs included in the email, resulting in the user clicking and downloading a malicious document. These Word documents continue to contain malicious macros, which in turn download additional payloads once the attacker sets their sites on a particular victim. As the geopolitical tensions grow in Azerbaijan with neighboring countries, this is no doubt a stage of espionage with national security implications being deployed by a malicious actor with a specific interest in various Azerbajiani government departments. Joining us in this week's Research Saturday to discuss the research from Cisco's Talos Outreach is Craig Williams. The research can be found here: PoetRAT: Malware targeting public and private sector in Azerbaijan evolves

Tämä jakso on lisätty Podme-palveluun avoimen RSS-syötteen kautta eikä se ole Podmen omaa tuotantoa. Siksi jakso saattaa sisältää mainontaa.

Jaksot(3716)

AI without adult supervision.

AI without adult supervision.

Meta’s AI models join the sandbox escape club. China’s telecom footprint in the U.S. may be larger than expected. The White House keeps its AI safety playbook under wraps. AI coding tools introduce ne...

6 Elo 25min

SAFE and sound.

SAFE and sound.

The White House lays out its AI strategy at Black Hat. Researchers spotlight rogue AI behavior. CISA warns of an actively exploited N-able flaw. TP-Link patches 15 Omada vulnerabilities. Apple fights ...

5 Elo 35min

NPM? Not my problem.

NPM? Not my problem.

New Shai-Hulud campaign compromises popular npm packages. Easterly says small municipalities shouldn’t have to fend for themselves. Chinese threat groups accelerate exploits. Samsung bans smart TV app...

4 Elo 29min

Water you waiting for?

Water you waiting for?

Cyberattacks hit U.S. water systems. CISA tackles open source security. China’s surveillance machine is exposed. Hotel Wi-Fi gets riskier. Healthcare and police data spill online. Fake SQLite vulnerab...

3 Elo 26min

The hidden risks in space supply chains. [T-Minus: Space-Cyber Briefing]

The hidden risks in space supply chains. [T-Minus: Space-Cyber Briefing]

As the space ecosystem continues to expand, the sector has become increasingly filled with new suppliers, manufacturers, and operators. However, while this development has led to the introduction of n...

2 Elo 19min

Black Hat preview: "Vulnerability Research in the Agentic Age." [Special Edition]

Black Hat preview: "Vulnerability Research in the Agentic Age." [Special Edition]

In this special edition, guest Yan Shoshitaishvili, Associate Professor, University of Arizona, joins host ⁠Dave Bittner⁠ to share a preview of his Black Hat USA 2026 keynote "Vulnerability Research i...

2 Elo 24min

The driver's seat to ransomware. [Research Saturday]

The driver's seat to ransomware. [Research Saturday]

This week, we are joined by Marcus Hutchins, Principal Threat Researcher at Expel, sharing their work on "Not very gentlemanly: Analyzing a zero-day exploit used by The Gentlemen ransomware to disable...

1 Elo 23min

Claude outside the lines.

Claude outside the lines.

Anthropic says Claude escaped the sandbox three times, while a judge questions the Pentagon’s blacklist. The EU launches an AI enforcement team, the FTC targets a telehealth firm’s tracking pixels, an...

31 Heinä 30min

Suosittua kategoriassa Politiikka ja uutiset

aikalisa
politiikan-puskaradio
ootsa-kuullut-tasta-2
uutiscast
rss-ootsa-kuullut-tasta
rss-seksicast
rss-podme-livebox
tervo-halme
otetaan-yhdet
rss-vaalirankkurit-podcast
aihe
rikosmyytit
rss-pinnalla
et-sa-noin-voi-sanoo-esittaa
politbyroo
rss-girls-finish-f1rst
rss-suoraan-asiaan
rss-kuka-mina-olen
rss-asiastudio
eevan-politiikkapodi-totuuksia-suomesta