TeamTNT's Cloud Credential Stealing Campaign
In the ever-evolving landscape of cybersecurity, threat actors continue to innovate and adapt their methods to exploit new technologies and platforms. One such group, known as TeamTNT, has been…
Tags /
#Threat Hunting
180 reports
Active Exploitation of Multiple Adobe ColdFusion Vulnerabilities
Rapid7 managed services teams have observed exploitation of Adobe ColdFusion in multiple customer environments. The attacks our team has responded to thus far appear to be chaining CVE-2023-29298…
A technical analysis of the Quasar-forked RAT called VoidRAT
https://resources.securityscorecard.com/research/technical-analysis-of-the-quasar-forked-rat-called-void-rat
Black Basta Overview
Black Basta is a Russian-speaking group that was first spotted in early 2022. It is known for its double extortion attack, where it not only executes ransomware but also exfiltrates sensitive…
ISC China Report Summary
https://isc.independent.gov.uk/wp-content/uploads/2023/07/ISC-China.pdf
SmokeLoader malware
SmokeLoader, also known as Dofoil, is a modular bot used primarily to download other malware onto a compromised system. It has been in operation since at least 2011 and has been used in various…
Microsoft Exchange Vulnerabilities
In the period from January to March, Microsoft Exchange Server software suffered from a series of significant data breaches caused by the exploitation of four vulnerabilities. These…
Uber Data Breach of 2017: Lessons in Transparency and Accountability
In November 2017, Uber, the ride-hailing service provider, disclosed a significant data breach that occurred in late 2016. The breach impacted approximately 57 million Uber users and drivers…
The Equifax Data Breach of 2017: An Unprecedented Cybersecurity Incident
In 2017, Equifax, one of the largest credit reporting agencies in the United States, experienced a massive data breach that exposed the personal information of millions of individuals. This breach…
2014 Sony Pictures Entertainment Breach
The cyber attack on Sony Pictures Entertainment in 2014 was a meticulously planned operation that began with careful preparation well in advance of the publicized attack date. The attackers…
Unveiling Stuxnet: The pioneering cyber-physical sabotage of Siemens Step7
Stuxnet, first discovered in 2010, was a malicious computer worm that caused substantial damage to Iran's nuclear program. The worm targeted supervisory control and data acquisition (SCADA)…