Opsec Cyber Latest Blog Posts Archives - Page 4 of 57

Category Archives: Latest Blog Posts

Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices

May 27 2021 By Daniel Pany in Dan Perez, Homepage Carousel, Latest Blog Posts, Malware, Sarah Jones, Security, Threat Research, TTPs, vulnerabilities

On April 20, 2021, Mandiant published detailed results of our investigations into compromised Pulse Secure devices by suspected Chinese espionage operators. This blog post...

Re-Checking Your Pulse: Updates on Chinese APT Actors Compromising Pulse Secure VPN Devices

May 27 2021 By Daniel Pany in Dan Perez, Homepage Carousel, Latest Blog Posts, Malware, Sarah Jones, Security, Threat Research, TTPs, vulnerabilities

On April 20, 2021, Mandiant published detailed results of our investigations into compromised Pulse Secure devices by suspected Chinese espionage operators. This blog post...

Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises

May 25 2021 By Daniel Pany in Daniel Kapellmann Zafra, Homepage Carousel, Keith Lunden, Latest Blog Posts, Nathan Brubaker, operational technology, Security, Threat Intelligence, Threat Research

Attacks on control processes supported by operational technology (OT) are often perceived as necessarily complex. This is because disrupting or modifying a control process to cause a...

Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises

May 25 2021 By Daniel Pany in Daniel Kapellmann Zafra, Homepage Carousel, Keith Lunden, Latest Blog Posts, Nathan Brubaker, operational technology, Security, Threat Intelligence, Threat Research

Attacks on control processes supported by operational technology (OT) are often perceived as necessarily complex. This is because disrupting or modifying a control process to cause a...

Shining a Light on DARKSIDE Ransomware Operations

May 11 2021 By Daniel Pany in Alyssa Rahman, Andrew Moore, Homepage Carousel, Jeremy Kennelly, Jordan Nuce, Kimberly Goody, Latest Blog Posts, Ransomware, Security, Threat Intelligence, Threat Research

Update (May 14): Mandiant has observed multiple actors cite a May 13 announcement that appeared to be shared with DARKSIDE RaaS affiliates...

Shining a Light on DARKSIDE Ransomware Operations

Update (May 14): Mandiant has observed multiple actors cite a May 13 announcement that appeared to be shared with DARKSIDE RaaS affiliates...

The UNC2529 Triple Double: A Trifecta Phishing Campaign

May 4 2021 By Daniel Pany in Dimiter Andonov, Homepage Carousel, Latest Blog Posts, Malware, Nick Richard, Phishing, Security, Threat Research

In December 2020, Mandiant observed a widespread, global phishing campaign targeting numerous organizations across an array of industries. Mandiant tracks this threat actor as UNC2529. Based...

The UNC2529 Triple Double: A Trifecta Phishing Campaign

May 4 2021 By Daniel Pany in Dimiter Andonov, Homepage Carousel, Latest Blog Posts, Malware, Nick Richard, Phishing, Security, Threat Research

In December 2020, Mandiant observed a widespread, global phishing campaign targeting numerous organizations across an array of industries. Mandiant tracks this threat actor as UNC2529. Based...

UNC2447 SOMBRAT and FIVEHANDS Ransomware: A Sophisticated Financial Threat

April 29 2021 By Daniel Pany in Homepage Carousel, Latest Blog Posts, Ransomware, Raymond Leong, Security, Threat Research, Zero-day Vulnerability

Mandiant has observed an aggressive financially motivated group, UNC2447, exploiting one SonicWall VPN zero-day vulnerability prior to a patch being available and deploying sophisticated malware previously ...