SecuriTricks - data exfiltration

Attack Reports

Title	Published	Tags	Description	Number of indicators
StopRansomware: RansomHub Ransomware	Aug. 30, 2024, 5:44 p.m.	privilege-escalation cobalt strike encryption CVE-2020-1472 ransomware-as-a-service ransomhub mimikatz CVE-2023-3519 2024-08-30 metasploit CVE-2023-22515 CVE-2023-46604 CVE-2017-0144 CVE-2023-48788 double-extortion CVE-2023-27997 data-exfiltration CVE-2023-46747 critical-infrastructure CVE-2020-0787 lateral-movement	RansomHub is a ransomware-as-a-service variant that has targeted over 210 victims across various critical infrastructure sectors …	14
Likely compromise of Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike	Aug. 2, 2024, 8:23 a.m.	apt cobalt strike credential theft cobaltstrike shadowpad data exfiltration 2024-08-02 poisonplug.shadow CVE-2018-0824 unmarshalpwn	A government-affiliated Taiwanese research institute specializing in computing technologies experienced a cyber intrusion likely …	13
Mint Stealer: A Comprehensive Study of a Python-Based Information Stealer	July 31, 2024, 10:09 a.m.	malware-as-a-service data exfiltration 2024-07-31 information stealer mint stealer evasion tactics	At Cyfirma, this report offers a comprehensive analysis of Mint Stealer, an information-stealing malware operating within a malwa…	10
Kematian-Stealer: A Deep Dive into a New Information Stealer	July 10, 2024, 10:08 a.m.	malware stealer persistence data exfiltration github 2024-07-10 kematian-stealer	This report provides an in-depth analysis of a newly discovered information stealer named Kematian-Stealer, actively developed on…	4
BlackSuit Ransomware: Insights and Defense Strategies	July 8, 2024, 10:54 a.m.	ransomware encryption data exfiltration 2024-07-08 blacksuit cybersecurity threat analysis	This report provides an in-depth analysis of the BlackSuit ransomware, a threat that has been actively targeting various sectors …	8
Phishing Incident Report: Facts and Timeline	June 25, 2024, 7:41 a.m.	phishing 2024-06-25 data exfiltration incident response mfa bypass email compromise	On June 18, 2024, an employee's account at ANY.RUN was compromised and used to carry out a phishing attack against the company's …	9

» Click here to see all Attack Reports «

Tag : data exfiltration