Opsec Cyber Andrew Moore Archives

Category Archives: Andrew Moore

Shining a Light on DARKSIDE Ransomware Operations

May 11 2021 By Daniel Pany in Alyssa Rahman, Andrew Moore, Homepage Carousel, Jeremy Kennelly, Jordan Nuce, Kimberly Goody, Latest Blog Posts, Ransomware, Security, Threat Intelligence, Threat Research

Update (May 14): Mandiant has observed multiple actors cite a May 13 announcement that appeared to be shared with DARKSIDE RaaS affiliates...

Shining a Light on DARKSIDE Ransomware Operations

Update (May 14): Mandiant has observed multiple actors cite a May 13 announcement that appeared to be shared with DARKSIDE RaaS affiliates...

Cyber Criminals Exploit Accellion FTA for Data Theft and Extortion

February 22 2021 By Daniel Pany in Andrew Moore, data theft, Genevieve Stark, Homepage Carousel, Kimberly Goody, Latest Blog Posts, Mandiant, Ransomware, Security, Threat Research, Van Ta, vulnerabilities

Starting in mid-December 2020, malicious actors that Mandiant tracks as UNC2546 exploited multiple zero-day vulnerabilities in Accellion’s legacy File Transfer Appliance (FTA) to install a newly discovered...

Cyber Criminals Exploit Accellion FTA for Data Theft and Extortion

FIN11: Widespread Email Campaigns as Precursor for Ransomware and Data Theft

October 14 2020 By Syndicator in Andrew Moore, Genevieve Stark, Homepage Carousel, Jacqueline O’Leary, Kimberly Goody, Latest Blog Posts, Nalani Fraser, Phishing, Ransomware, Security, Threat Intelligence, Threat Research, Vincent Cannon

Mandiant Threat Intelligence recently promoted a threat cluster to a named FIN (or financially motivated) threat group for the first time since 2017. We have detailed FIN11's various...

FIN11: Widespread Email Campaigns as Precursor for Ransomware and Data Theft

Mandiant Threat Intelligence recently promoted a threat cluster to a named FIN (or financially motivated) threat group for the first time since 2017. We have detailed FIN11's various...

FIN11: Widespread Email Campaigns as Precursor for Ransomware and Data Theft

Mandiant Threat Intelligence recently promoted a threat cluster to a named FIN (or financially motivated) threat group for the first time since 2017. We have detailed FIN11's various...

FIN11: Widespread Email Campaigns as Precursor for Ransomware and Data Theft

Mandiant Threat Intelligence recently promoted a threat cluster to a named FIN (or financially motivated) threat group for the first time since 2017. We have detailed FIN11's various...

STOMP 2 DIS: Brilliance in the (Visual) Basics

February 5 2020 By Daniel Pany in Andrew Moore, Backdoor, Blaine Stancill, FLARE, Genevieve Stark, Homepage Carousel, Latest Blog Posts, Malware, Phishing, Rick Cole, Threat Research

Throughout January 2020, FireEye has continued to observe multiple targeted phishing campaigns designed to download and deploy a backdoor we track as MINEBRIDGE. The campaigns primarily targeted...