Niraj Singh retweeted
Recently I researched activity from some DPRK baddies called Andariel. The investigation involved 2 set of attacks, a staging server, some new RATs, and tools/TTPs - all attributable to Andariel.
The report is now live: labs.withsecure.com/publicat…
#malware #andariel #dprk
Niraj Singh retweeted
'Tis the season to be talking about trends!
Sharing his thoughts with @siliconrepublic, @WithSecure's Neeraj Singh (@_ginnare) tells us what he thinks we'll be seeing in cyber security in 2024
#cybersecurity #predictions withsecure.smh.re/2CW
Niraj Singh retweeted
A couple thoughts on ATT&CK Evaluations...yes, the marketing is ridiculous. I also hope the useful parts of these evaluations won't get completely lost in that. You can find a lot of insight on tools if you dive into the results. Here are some example questions to consider...
Niraj Singh retweeted
🧵
#DUCKTAIL has adapted their infection chain in a short span of time since our latest report was published.
I have summarized their latest execution chain in the attached figure.
In short:
Niraj Singh retweeted
1/3 I am happy to share the latest research I had been working on - "Meet the Ducks".
We've witnessed an uptick of threat activity surrounding #Meta's ad ecosystem from Vietnam since early 2023 - some highlighted by us as well as other vendors & security researchers in the past.
NEW RESEARCH: In their latest report, @mkazemhn and @_ginnare dive into Vietnamese cyber crime targeting Meta Business accounts, with specific attention paid to DUCKTAIL & a new threat called DUCKPORT
labs.withsecure.com/publicat…
#meettheducks #ducktail #duckport #CyberSecurity
Niraj Singh retweeted
NEW RESEARCH: In their latest report, @mkazemhn and @_ginnare dive into Vietnamese cyber crime targeting Meta Business accounts, with specific attention paid to DUCKTAIL & a new threat called DUCKPORT
labs.withsecure.com/publicat…
#meettheducks #ducktail #duckport #CyberSecurity
Niraj Singh retweeted
NEW RESEARCH: WithSecure Labs publishes a report documenting the movement of SILKLOADER from Chinese cyber criminals to Russian #ransomware gangs, including CONTI and it’s various affiliates/offspring.
Read the report here--> labs.withsecure.com/publicat…
#SILKLOADER #Cyberattack
Niraj Singh retweeted
Let's continue our ATT&CK misunderstandings series & discuss procedures.
People sometimes assume ATT&CK is trying to cover every possible way a (sub-)technique can be done, but our procedures only cover what we've seen in public reporting tied to Groups, Software, or Campaigns.
Niraj Singh retweeted
NEW RESEARCH: WithSecure’s @r0zetta details several interesting prompt engineering tricks that could be used to creatively abuse GPT-3, forcing people to become even more skeptical about what they read>> labs.withsecure.com/publicat…
#AI #GPT3 #MachineLearning #cybersecurity #infosec
Niraj Singh retweeted
NEWS: DUCKTAIL, a Vietnam-based cyber crime group discovered by WithSecure, has expanded and evolved their operations. Their attacks cost businesses hundreds of thousands of dollars.
Read more in our new report >>
labs.withsecure.com/publicat…
#cyberattacks #Ducktail #cybersecurity
Niraj Singh retweeted
SOC analysts and detection engineers who like to publicly write/talk about detection content should put out more about the false positives they usually have to deal with. I feel that false positives often suffer from what academics call the "Publication bias"
Niraj Singh retweeted
I love @MITREattack - but the ways some vendors operationalize it is misleading and often useless. 🧵
Niraj Singh retweeted
Dark Reading | Internet Searches Reveal Surprisingly Prevalent Ransomware stpmvt.com/3z5Abqd
Niraj Singh retweeted
[1/5] Well as you know me there is no trash I would recommend -> I highly recommend to give a try and play with these newly released set of tools #GarbageMan made by @WithSecure. Works like charm for #NET analysis🙏🙌😍
Github:github.com/WithSecureLabs/Ga…
Blog:labs.withsecure.com/tools/ga…
Niraj Singh retweeted
NEWS: WithSecure™ has discovered a new Infostealer Malware, dubbed “DUCKTAIL” which can hijack Facebook Business accounts
labs.withsecure.com/publicat…
#CyberAttack #cybersecurity #malware #Facebook
Niraj Singh retweeted
GarbageMan: for when you absolutely, positively have to find them #Formbook #IOCs in your .NET heap: labs.withsecure.com/tools/ga…
Niraj Singh retweeted
F-Secure reports the NRSMiner cryptocurrency miner, known to user EternalBlue to propagate inside networks, has updated to a newer version labsblog.f-secure.com/2019/0…
