Current Threat

Emotet Implements New Delivery Techniques, Increases Activity, And Fixes Bugs In Their Malicious Payload

Since the return of their activity in November 2021, 10 months after its disruption, Emotet is again one of the most prolific botnets and trojans targeting Windows platforms to distribute follow-on malware. Emotet is already considered the top 1 malware family by CheckPoint researchers. According to ProofPoint researchers, the new wave of activity has a low-volume nature and differs from the typical behavior of the threat group.

Threat Actor

New Malware of Lazarus Group Targetting Specific Process

Industries impacted: Information Technology, Materials

Following up on the recent activity of Lazarus group reported by Symantec, this week, AhnLab ASEC team also released a related report, describing activity targeting the defense and chemical sectors in the South Korea. QuoIntelligence continues to assess the campaigns described within the reports conducted by Lazarus, given that the campaigns point to attempts of industrial and military espionage. Additionally, QuoIntelligence is tracking the activity for awareness and early defense and prevention before proliferation of campaigns to European entities.

Rollups:

Industries impacted: Consumer Discretionary, Financials, Government

• SentinelLabs Reports Nokoyawa and Hive Ransomware Are Not Related
• Iranian APT35 Leveraged Recently Patched VMWare Vulnerability to Push New Backdoor
• Industrial Spy: New eCrime Marketplace Sells Stolen Data from Breached Companies
• Two Months of Russian Cyber-Activity Ukraine Reported by Microsoft

Geo Highlights

Ukraine update: Russia Halts Gas Export to Some EU Countries, Moldova Potentially at Risk

The war in Ukraine enters its third month as the tone of confrontation between Russia and Western countries grows. This, together with Russia’s warning that the Transnistria region could be drawn into the war in Ukraine, signals the invasion is unlike to end any time soon. Diplomacy seems to have stalled, likely resulting in a long-lasting conflict. This is likely to result in global disruptions of supply chains that will extend through the year and in increased commodity prices. Organizations are also likely to reshape how and from where they get their supplies as new alliances and tensions appear in the geopolitical landscape.

Rollups:

Industries impacted: Information Technology

• Digital Services Act: Council and European Parliament Provisional Agreement for Making the Internet a Safer Space for European Citizens
• EU, India Agree to Broaden Ties Amid Ukraine War
• FBI Director Says Espionage Threat Posed by China Is Unprecedented in History
• France Opens Investigation into ‘Serious’ Sabotage of Internet Network