QuoIntelligence’s Weekly Intelligence Snapshot for the week of 29 April – 6 May 2020 is now available!

Find the summary below and subscribe to our mailing list at the bottom if you want to receive Weekly summaries and other regular updates from us! Or inquire today to receive a free trial of our full Weekly Intelligence Product, which includes analyst comments, MITRE ATT&CK tags, IOCs, and more!

CYBER

Current Threat

Industries impacted: ANY

Researchers from McAfee Labs and Northwave released a joint report detailing an incident response to a threat actor conducting a targeted attack ultimately deploying the LockBit ransomware throughout an infiltrated network.

Incident

Industries impacted: Financials

Maze ransomware operators reportedly breached Banco BCR, the state-owned bank of Costa Rica, once in August 2019 and again in February 2020. Both incidents resulted in unauthorized access to its payment processing systems allowing the actors to exfiltrate 11 million credit card numbers and other sensitive data.

Rollups

  • Global Healthcare Group Fresenius Reportedly Targeted by SNAKE Ransomware, Among Others

  • GoDaddy Notifies Customers of Latest Breach

  • Critical Vulnerabilities in Salt Management Framework Exploited in the Wild

  • New Mobile Banking Trojan Eventbot Targets Bank Customers of Over 200 Apps

GEOPOLITICS

Rollups

  • Germany Reportedly Issues Arrest Warrant for Alleged Member of APT28 over 2015 Cyberattack on Bundestag
  • US Government Declares Threat From ‘Adversary States’ to US Electricity System a National Emergency