CTI Report: Lazarus/APT38 tradecraft against SWIFT Alliance Access and downstream laundering via Manila 1. Executive Summary In early February 2016, attackers attributed to North Korea’s Lazarus Group compromised Bangladesh Bank’s…
Hong Kong-based electronic toy manufacturer VTech announced in November 2015 that it had suffered a significant data breach. The breach resulted in unauthorized access to personal data related to its…
In October 2015, TalkTalk, a UK-based telecommunications company, experienced a substantial data breach affecting around 4% of its customers. Hackers were able to gain access to a wealth of data,…
In July 2015, Ashley Madison, a Canadian online dating service marketed to people who are married or in relationships, was hacked by a group calling itself The Impact Team. The…
In June 2015, the U.S. Office of Personnel Management (OPM) announced a substantial data breach, marking one of the most significant breaches in U.S. government history. Initially, the breach was…
In February 2015, Anthem, one of the largest health insurance companies in the U.S., suffered a data breach that led to the exposure of personal information of nearly 78.8 million…
The cyber attack on Sony Pictures Entertainment in 2014 was a meticulously planned operation that began with careful preparation well in advance of the publicized attack date. The attackers accessed…
Zeus, known as Zbot, is a notorious Trojan horse malware package that predominantly targets Microsoft Windows. The primary aim of Zeus has been to steal sensitive data, especially banking information…
Operation Aurora: a modern CTI deep dive into the 2009–2010 intrusion setOperational CTI, incident response, nation-state tradecraft, CVE-2010-0249, Internet Explorer, Hydraq, Elderwood, IP theft, source code compromise, spearphishing, watering hole…
Stuxnet, first discovered in 2010, was a malicious computer worm that caused substantial damage to Iran's nuclear program. The worm targeted supervisory control and data acquisition (SCADA) systems. It is…