
Weekly Intelligence Snapshot – Week 25
Quointelligence is analyzing the use of Follina vulnerability in the campaign targeting entities in Ukraine reported by the CERT-UA, allegedly
Explore our comprehensive archive organized by taxonomy. Discover a wealth of information categorized by subject, theme, or type to enhance your research and understanding.

Quointelligence is analyzing the use of Follina vulnerability in the campaign targeting entities in Ukraine reported by the CERT-UA, allegedly

We analyzed the encryption software samples used in HelloXD’s Ransomware operation and provide an update of the latest legislation regarding

This week we provide analysis into IndustrialSpy and their encryption software, which they recently leveraged in cyber operations.

Quointelligence reported on the Gamaredon group activity characterized by the use of SFX archives to deliver #malware. In this weekly,

Quointelligence reported on the Gamaredon group activity characterized by the use of SFX archives to deliver #malware. In this weekly,

In this Weekly we report on how a threat actor, possibly Russian, is targeting users in Germany by using information

In this weekly we investigate the emerging threat of NodePacketManager (NPM) becoming an attack vector for supply chains and the

QuoIntelligence is tracking a campaign where the threat actors are using the remote template injection to deliver an espionage implant

This week we cover our observations of #Emotet development, including differences in #TTPs observed in recent samples. We also cover

This week, the QuoIntelligence research team observed a campaign of the Gamaredon group, where SFX archives are used to deliver
Try searching our blog

China Nexus Quartermaster Infrastructure Enables Espionage Against Research, Defense, Energy, Healthcare and Financial Networks | Germany Says Russia Responsible for Drone Attack at Leipzig Airport

Suspected Russian Clusters Target Academia, Defense, And Government Individuals Across Europe And The US | Slovak Police Thwart Planned Arson Attack on Drone Factory

Ransom Busters Presents Itself as a Ransomware Recovery Company Amid Suspected Links to Ransomware Affiliates | Estonia PM Says Arson Attack on Defense Contractor May Be Linked to Russia

Threat Actor Abuses Salesforce and ServiceNow Guest Portals at Telecommunications, Financial, and Public Sector Organizations | Germany Warns of Daily Hybrid Warfare After Suspected Drone Attack