
Weekly Intelligence Snapshot – Week 23, 2023
Creators of the Ransomware-as-a-Service dubbed NoEscape are actively recruiting affiliates to spread this wide-functionality RaaS which allows for defense evasion.
Explore our comprehensive archive organized by taxonomy. Discover a wealth of information categorized by subject, theme, or type to enhance your research and understanding.

Creators of the Ransomware-as-a-Service dubbed NoEscape are actively recruiting affiliates to spread this wide-functionality RaaS which allows for defense evasion.

Threat Actor “Spyboy” is selling software claiming to terminate AV and EDR processes of EDRs.

G7 Summit: Leaders prioritize supply chain resilience and fair trade practices.

Officials in multiple European countries were targeted by a newly discovered malicious firmware implant called “Horse Shell”.

The National Security Agency (NSA) and partner agencies have identified the infrastructure for Snake malware, a Russian cyberespionage tool, in

QuoIntelligence observed a new backdoor called “Durtmovoy” that is currently in development by “Durt Team”, a newly observed Russian threat

We track a Phishing campaign targeting SCADA system providers in the DACH region that delivers the Remcos Trojan. We analyze

Ransomware groups and APTs are resorting to Living-off-the-Land Binaries (LOLBINs) — legitimate software and tools preinstalled on infected systems.

As the use of ChatGPT rises, we analyze the current AI regulatory frameworks.

Kaspersky reports that some victims compromised in the SupplyChain attack against 3CX’s Desktop Application VoIP software also had the Gopuram
Try searching our blog

China Nexus Quartermaster Infrastructure Enables Espionage Against Research, Defense, Energy, Healthcare and Financial Networks | Germany Says Russia Responsible for Drone Attack at Leipzig Airport

Suspected Russian Clusters Target Academia, Defense, And Government Individuals Across Europe And The US | Slovak Police Thwart Planned Arson Attack on Drone Factory

Ransom Busters Presents Itself as a Ransomware Recovery Company Amid Suspected Links to Ransomware Affiliates | Estonia PM Says Arson Attack on Defense Contractor May Be Linked to Russia

Threat Actor Abuses Salesforce and ServiceNow Guest Portals at Telecommunications, Financial, and Public Sector Organizations | Germany Warns of Daily Hybrid Warfare After Suspected Drone Attack