QuoIntelligence’s Weekly Intelligence Snapshot for the week of 18 – 24 Mar is now available! Find a summary here and subscribe to our mailing list below if you want to receive regular updates from us!

Cyber

Threat Actor
Industry impacted: Financials, Government, Health Care, Industrials, Information Technology

Researchers at PRODAFT discovered a new, large-scale cyber espionage operation conducted by a sophisticated threat actor group dubbed SilverFish, which reportedly has ties to the previously known EvilCorp group, the SolarWinds attack, and other malware campaigns.

Rollup
Industry impacted: Government, Information Technology

• Threat Actors Leverage XcodeSpy to Infect Apple Developers Using Xcode
• The Finnish Police’s Investigation Links APT31 as Threat Actor Behind Parliament Compromise
• Computer Giant Acer Suffered Ransomware Attack, with Highest Ransom Observed to Date
• NCC Group Detects Active Exploitation of Recently Patched BIG-IP/BIG-IQ Vulnerability
• Adobe Released Patches for Vulnerability Impacting ColdFusion 2016, 2018, and 2021
• IoT Manufacturer Sierra Wireless Suffered a Ransomware Attack
• New Purple Fox Variant with Worm Capabilities Targets Windows Systems

 Geopolitics

Industry impacted: Government, Health Care

As some countries are beginning vaccination schemes, most countries have not yet started vaccinating their population and are battling to secure vaccine supplies. While some countries focus on securing vaccine supplies for themselves, China and Russia are establishing new strategic relations and agreements to supply their vaccines to other countries, potentially gaining influence in Latin American and Africa. Additionally, unequal distribution of vaccines and long-lasting political and economic effects are likely to influence international order and prompt instability.

Rollup
Industry impacted: Government

• EU, UK, US, and Canada Impose Sanctions Against Chinese Officials Days After US-China Meeting
• EU Council Adopts New Cybersecurity Strategy
• North Korea Conducts Ballistic Missile Tests
• Recent Development in the Middle East

Outlook

Industry impacted: Government

• 30 March – Virtual Cybersecurity Summit: Connected Devices Security
• 25 March – Video conference of the members of the European Council