
Weekly Intelligence Snapshot – Week 31
We report on SentinelOne’s findings on LockBit’s latest method which employs the MpCmdRun.exe executable, which is extremely difficult to detect.
Explore our comprehensive archive organized by taxonomy. Discover a wealth of information categorized by subject, theme, or type to enhance your research and understanding.

We report on SentinelOne’s findings on LockBit’s latest method which employs the MpCmdRun.exe executable, which is extremely difficult to detect.

This week we cover a spearphishing campaign attributed to Evilnum, which is targeting DeFi platforms in Europe.

QuoIntelligence analyzes the consequences of China’s strategy for critical industries particularly exposed to cyber espionage as well as its effects

QuoIntelligence is tracking activity related to the use of fake job offers and job applications to compromise companies for monetary

QuoIntelligence gathered and processed the different Microsoft product updates in order to provide a clear overview of the different topics

After Kaspersky ICS CERT published their findings of an active shadowPad infection, QuoIntelligence analyzed the activity further in our report.

Quointelligence is analyzing the use of Follina vulnerability in the campaign targeting entities in Ukraine reported by the CERT-UA, allegedly

We analyzed the encryption software samples used in HelloXD’s Ransomware operation and provide an update of the latest legislation regarding

This week we provide analysis into IndustrialSpy and their encryption software, which they recently leveraged in cyber operations.

Quointelligence reported on the Gamaredon group activity characterized by the use of SFX archives to deliver #malware. In this weekly,
Try searching our blog

New Remote Tampering With Refrigeration Controls Affects Supermarkets Across Europe | Bomb Threats Disrupt Finnair, Wizz Air, and Other European Flights Twice In a Week

Threat Actors Abuse Microsoft Teams External Chat to Impersonate IT Support in Over 400 Incidents | Protests Spread Across France, Italy, Spain, Belgium, and Albania

Investment through Christian Lindner Beteiligungsgesellschaft adds to backing from Elevator Ventures, BMH, eCAPITAL and Mercurius.

PHP Prepares Emergency Fixes for Two Vulnerabilities | Storm-0940 Uses AI to Accelerate Microsoft 365 Attacks | Lithuania Links Starlink Arson Attempt to Russian Sabotage