Weekly Intelligence Snapshot – Week 24, 2023

UNC3886 — a Chinese Cyberespionage group — is targeting defense, tech, and telecom organizations in the US and APAC.
Weekly Intelligence Snapshot – Week 23, 2023

Creators of the Ransomware-as-a-Service dubbed NoEscape are actively recruiting affiliates to spread this wide-functionality RaaS which allows for defense evasion.
Weekly Intelligence Snapshot – Week 22, 2023

Threat Actor “Spyboy” is selling software claiming to terminate AV and EDR processes of EDRs.
Weekly Intelligence Snapshot – Week 21, 2023

G7 Summit: Leaders prioritize supply chain resilience and fair trade practices.
Weekly Intelligence Snapshot – Week 20

Officials in multiple European countries were targeted by a newly discovered malicious firmware implant called “Horse Shell”.
Weekly Intelligence Snapshot – Week 19

The National Security Agency (NSA) and partner agencies have identified the infrastructure for Snake malware, a Russian cyberespionage tool, in over 50 countries.
Weekly Intelligence Snapshot – Week 18

QuoIntelligence observed a new backdoor called “Durtmovoy” that is currently in development by “Durt Team”, a newly observed Russian threat actor.
Weekly Intelligence Snapshot – Week 17

We track a Phishing campaign targeting SCADA system providers in the DACH region that delivers the Remcos Trojan. We analyze the German IT Security Act 2.0, the new Cybersecurity standard for German small enterprises, DIN SPEC 27076 and the CyberRisikoCheck.
Weekly Intelligence Snapshot – Week 16

Ransomware groups and APTs are resorting to Living-off-the-Land Binaries (LOLBINs) — legitimate software and tools preinstalled on infected systems.
Weekly Intelligence Snapshot – Week 15

As the use of ChatGPT rises, we analyze the current AI regulatory frameworks.