APT (Targeted attacks) – Page 8

DTrack activity targeting Europe and Latin America

Posted on November 15, 2022 by Konstantin Zykov, Jornt van der Wiel

In recent campaigns DTrack targets organizations in Europe and Latin America, and uses more delivery stages. Continue reading DTrack activity targeting Europe and Latin America→

Advanced threat predictions for 2023

Posted on November 14, 2022 by GReAT

We polled our experts from the GReAT team and have gathered a small number of key insights about what APT actors are likely to focus on in 2023. Continue reading Advanced threat predictions for 2023→

Cybersecurity threats: what awaits us in 2023?

Posted on November 9, 2022 by Kaspersky

We invited notable experts to share their insights and unbiased opinions on what we should expect from cybersecurity in the following year. Continue reading Cybersecurity threats: what awaits us in 2023?→

Server-side attacks, C&C in public clouds and other MDR cases we observed

Posted on November 2, 2022 by Sergey Soldatov

This report describes several interesting incidents observed by the Kaspersky Managed Detection and Response (MDR) team. We hope that it helps you to stay up to date on the modern threat landscape and to be better prepared for attacks. Continue reading Server-side attacks, C&C in public clouds and other MDR cases we observed→

APT trends report Q3 2022

Posted on November 1, 2022 by GReAT

This is our latest summary of advanced persistent threat (APT) activities, focusing on events that we observed during Q3 2022. Continue reading APT trends report Q3 2022→

APT10: Tracking down LODEINFO 2022, part II

Posted on October 31, 2022 by Suguru Ishimaru

In the second part of this report, we discuss improvements made to the LODEINFO backdoor shellcode in 2022. Continue reading APT10: Tracking down LODEINFO 2022, part II→

APT10: Tracking down LODEINFO 2022, part I

Posted on October 31, 2022 by Suguru Ishimaru

The first part of this report will provide technical analysis of the new infection methods such as SFX files and DOWNIISSA, a new downloader shellcode used to deploy the LODEINFO backdoor. Continue reading APT10: Tracking down LODEINFO 2022, part I→

DiceyF deploys GamePlayerFramework in online casino development studio

Posted on October 17, 2022 by Kurt Baumgartner, Georgy Kucherin

In this report we provide technical analysis of the GamePlayerFramework deployed by an APT we call DiceyF, which is targeting online casinos in Southeast Asia. Continue reading DiceyF deploys GamePlayerFramework in online casino development studio→

TOP 10 unattributed APT mysteries

Posted on October 7, 2022 by Costin Raiu

TajMahal, DarkUniverse, PuzzleMaker, ProjectSauron (aka Strider), USB Thief, TENSHO (aka White Tur), PlexingEagle, SinSono, MagicScroll (aka AcidBox), Metador—all these targeted attacks are still unattributed. Continue reading TOP 10 unattributed APT mysteries→