QuoIntelligence’s Weekly Intelligence Snapshot for the week of 29 June – 5 July 2023 is now available! Find a summary here and subscribe to our mailing list below if you want to receive regular updates from us!

Want to read the full story? Subscribe to our newsletter to access the complete Weekly Intelligence Snapshot. Don’t miss out on more intelligence!

Cyber Highlights

Current threat

Neo_Net: eCrime Campaign against European Financial Institutions

Industry impacted: Financials

QuoIntelligence has been tracking a threat actor using the handle “Neo_Net” on Telegram who has been running a mobile malware campaign against several major European banks since June 2021. Focussing on specific banks at a time, Neo_Net sets up a phishing infrastructure combined with targeted Android trojans to lure victims into revealing their credentials and steal funds from compromised accounts. Mostly active in Spain, Neo_Net is also operating a Smishing-as-a-Service operation called “Ankarex” targeting several countries around the world.

Rollups

Industries impacted: Financials, Government

  • New Malware Utilizes DNS TXT Record to Aid In Detection Evasion
  • New RustBucket Malware Variant Used in BlueNoroff Campaign With Improved Persistence Capabilities and Reduced Signature Detection
  • Chinese Threat Actors Use HTML Smuggling to Target Europe in SmugX Campaign
  • Meduza Stealer: Advanced Stealth Malware Poses Data Security Threat
  • Crysis Threat Actor Observed Installing Venus Ransomware Through Externally Exposed RDP
  • New Silentbob Campaign Targets Cloud Native Environments

Geo Highlights

China Issues New Rules To Respond To Western De-Risking Strategies

Industries impacted: Energy, Government, Information Technology, Materials

QuoIntelligence analyzes the impact of Beijing’s New Foreign Relations Law and Chinese export controls on two strategic metals in the framework of increasingly tense economic relations between China and the US.

Rollups

Industries impacted: Energy, Government, Industrials, Information Technology

  • EU-NATO Task Force Releases Report On the Resilience of Critical Infrastructure
  • The European Commission Proposes New Rules For GDPR Enforcement

Community Area

Outlook

  • 11 July – NATO Summit
  • 12 July – 20th Conference on Detection of Intrusions and Malware & Vulnerability Assessment – DIMVA 2023
  • 13 July – Cybersecurity Expo Manchester 2023

Latest Reports

(Sent to PREMIUM Customers only)

  • 4 July – Intel Assessment  IT and OT Based Threats to ICS Operations
    We analyze the current capabilities used to disrupt Industrial Control Systems (ICS) operations in the critical infrastructure sector and assess how they will evolve.
  • 21 May – Intel Briefing: Vice Society Operational Profile
    We look into the second most successful ransomware group of Q1 this year, known for its targeting of the education, healthcare, manufacturing, financial, energy, transportation, and retail sectors, as well as NGOs.
  • 26 May – Intel Assessment: AI: Risks and Challenges in Cyberspace and the Geopolitical Landscape 
    An in-depth evaluation of the reality of the threats the use of generative AI tools by threat actors pose. It also seeks to identify privacy and regulatory risks for businesses using such tools.

Interested in becoming a premium customer? Let’s talk