Advanced Persistent Threat – Computer Security Articles

Behind each cyberattack on the MSP is typically a system left unpatched, asset management undone, security officer not hired, or board who sees investment in security as a cost center rather than a long-term investment.

Categories:

Opinion

Tags: advanced persistent threat advanced persistent threats APT breach credential management credentials data breach hacking managed service provider MSP MSPs phishing

MalwareBytes Security

Securing the MSP: their own worst enemy

January 30, 2020 admin Advanced Persistent Threat, Advanced persistent threats, APT, breach, credential management, credentials, data breach, hacking, managed service provider, MSP, msps, Opinion, phishing

Credit to Author: William Tsing| Date: Thu, 30 Jan 2020 16:00:00 +0000

Categories:

Opinion

Tags: advanced persistent threat advanced persistent threats APT breach credential management credentials data breach hacking managed service provider MSP MSPs phishing

(Read more…)

The post Securing the MSP: their own worst enemy appeared first on Malwarebytes Labs.

MalwareBytes Security

A week in security (July 15 – 21)

July 22, 2019 admin 2fa bypass, a week in security, Advanced Persistent Threat, Android apps, APT, backdoor, BitPaymer ransomware, browser extensions, bulletproof, chrome, Cybersecurity education, DataSpii, DDos attack, DoppelPaymer, EvilGnome, Extenbro, FaceApp, Facebook, Facebook reporting tool, Firefox, generation, instagram, Ke3chang, Magecart, Media File Jacking, privacy, RingCentral flaw, Sodinokibi, telegram, vital infrastructure, WhatsApp, Zhumu flaw, zoom zero-day

Credit to Author: Malwarebytes Labs| Date: Mon, 22 Jul 2019 15:50:35 +0000

A roundup of cybersecurity news from July 15–21, including the Zoom camera vulnerability, Extenbro, Sodinokibi, Magecart, and cybersecurity challenges facing the education sector.

Categories:

A week in security

Tags: 2fa bypass advanced persistent threat Android apps APT backdoor BitPaymer ransomware browser extensions bulletproof chrome cybersecurity education DataSpii DDos attack DoppelPaymer EvilGnome Extenbro FaceApp facebook Facebook reporting tool firefox generation Instagram Ke3chang Magecart Media File Jacking privacy RingCentral flaw Sodinokibi telegram vital infrastructure whatsapp Zhumu flaw zoom zero-day

(Read more…)

The post A week in security (July 15 – 21) appeared first on Malwarebytes Labs.

MalwareBytes Security

The Advanced Persistent Threat files: APT10

January 16, 2019 admin Advanced Persistent Threat, Advanced persistent threats, aerospace, APT, APT10, APTs, China, Chinese Ministry of State Security, construction, cybercrime, engineering, FireEye, hacking, MSS, PlugX, Poison Ivy, scanbox, sogu, telecoms, threat actors

Credit to Author: William Tsing| Date: Wed, 16 Jan 2019 17:00:00 +0000

While security companies are getting good at analyzing the tactics of nation-state threat actors, they still struggle with placing these actions in context and making solid risk assessments. So in this series, we’re going to take a look at a few APT groups, and see how they fit into the larger threat landscape—starting with APT10.

Categories:

Tags: advanced persistent threat advanced persistent threats aerospace APT APT10 APTs china Chinese Ministry of State Security construction engineering FireEye MSS PlugX Poison Ivy scanbox sogu telecoms threat actors

(Read more…)

The post The Advanced Persistent Threat files: APT10 appeared first on Malwarebytes Labs.

Microsoft Security

Reverse engineering DUBNIUM –Stage 2 payload analysis

January 23, 2017 admin Advanced Persistent Threat, Advanced persistent threats, Antimalware research for IT pros and enthusiasts, DUBNIUM APT, DUBNIUM infection chain, DUBNIUM payload, Microsoft Threat Intelligence

Recently, we blogged about the basic functionality and features of the DUBNIUM advanced persistent threat (APT) activity group Stage 1 binary and Adobe Flash exploit used during the December 2015 incident (Part 1, Part 2). In this blog, we will go through the overall infection chain structure and the Stage 2 executable details. Stage 2 executables…