Category Archives: Threat Context

Visibility, Context, Automation are Key to Security Control

Posted on by

Remote work is now ingrained into the fabric of how companies operate. Many have already realized this new working paradigm optimizes productivity. So much so, that an ever-growing list of companies – Salesforce, Facebook, Dropbox and more – have conv… Continue reading Visibility, Context, Automation are Key to Security Control→

Using similarity to expand context and map out threat campaigns

Posted on by

TL;DR: VirusTotal allows you to search for similar files according to different orthogonal notions (structure, visual layout, icons, execution behaviour, etc.). File similarity can be combined with the “have:” search modifier in order to gain more cont… Continue reading Using similarity to expand context and map out threat campaigns→

M00nD3v, HawkEye threat actor, sells malware after COVID-19 diagnosis

Posted on by

Key Points The information-stealing malware dubbed M00nD3v Logger was recently auctioned off on Hack Forums,  together with HakwEye Reborn.   The threat actor – operating under the alias “M00nD3v” – states that they so… Continue reading M00nD3v, HawkEye threat actor, sells malware after COVID-19 diagnosis→