Collaborate Disseminate
Kaspersky experts studied the activity of Key Group, which utilizes publicly available builders for ransomware and wipers, as well as GitHub and Telegram. Continue reading Key Group: another ransomware group using leaked builders
An investigation of BlackJack’s software, TTPs, and motivations led Kaspersky experts to identify a possible connection with the Twelve group. Continue reading From 12 to 21: how we discovered connections between the Twelve and BlackJack groups
Kaspersky researchers detected a campaign exclusively targeting Italian users by delivering a new RAT dubbed SambaSpy Continue reading Exotic SambaSpy is now dancing with Italian users
How hackers embed a malware into a Excel file? Let’s say it maybe a simple RAT. Bypassing Windows Defender and not showing any strange macro blocks on opening, is this something possible to do? I’m starting to study more about this, and I … Continue reading There’s a way to embed malware in excel nowadays? [closed]
Kaspersky shares insights into the activity and TTPs of the BlindEagle APT, which targets organizations and individuals in Colombia, Ecuador, Chile, Panama and other Latin American countries. Continue reading BlindEagle flying high in Latin America
The report features the most significant developments relating to APT groups in Q2 2024, including the new backdoor in Linux utility XZ, a new RAT called SalmonQT, and hacktivist activity. Continue reading APT trends report Q2 2024
New Poco RAT Malware Targets Spanish Speakers Through Emails! Disguised as financial documents, Poco RAT steals your info… Continue reading New Data-Stealing Poco RAT Campaign Targeting Spanish Speakers
I installed the token months ago, have since wiped my drive and reinstalled windows, but I still get email notifications saying my token is triggered?
THe token in question is called a FAST URL REDIRECT (Alert When a URL is Visited, User i… Continue reading Canary Token (from canarytokens.org) still getting triggered despite reinstalling Windows? [closed]
Just found some text files inside some folders that are in C:\Users(my username)\AppData\Local\k-Logged-(my username).zip
Here’s the link to some of the screenshots
https://postimg.cc/gallery/nnbTzfV/4163afc1
The last date modified for a… Continue reading Found some files on my pc that made me suspect a RAT. Need some help/advice [closed]
We analyze the tactics and techniques of attackers targeting organizations through trusted relationships – that is, through contractors and external IT service providers. Continue reading Trusted relationship attacks: trust, but verify