Velociraptor incident response tool abused for remote access
This approach represents an evolution from threat actors abusing remote monitoring and management tools
Similar Posts
GlobalX, Airline for Trump’s Deportations, Hacked
Bys sJoseph Cox and Jaso Koebler report: Hackers have targeted GlobalX Air, one of the main airlines the Trump administration is using as part of its deportation efforts, and stolen what they say are flight records and passenger manifests of all of its flights, including those for deportation, 404 Media has learned. The data, which the…
Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor Variants
Bys sThe threat actor known as Lotus Panda has been observed targeting government, manufacturing, telecommunications, and media sectors in the Philippines, Vietnam, Hong Kong, and Taiwan with updated versions of a known backdoor called Sagerunex. “Lotus Blossom has been using the Sagerunex backdoor since at least 2016 and is increasingly employing long-term persistence command shells and…
Generative AI and cybersecurity: What Sophos experts expect in 2026
Bys sCategories: Sophos Insights Tags: Sophos AI, Gen AI, Year in Review
They’ve escaped a lot of media attention, but Anubis RaaS is a threat to the medical sector
Bys sAlthough many ransomware gangs no longer encrypt victims and focus on exfiltration and extortion, some groups continue to encrypt. Anubis RaaS is one of them. SuspectFile reports that Anubis recently attacked Mid South Pulmonary & Sleep Specialists (MSPS) in Tennessee and was willing to answer some questions from SuspectFile. According to the spokesperson, initial access……
DPRK Hackers Steal $137M from TRON Users in Single-Day Phishing Attack
Bys sMultiple threat activity clusters with ties to North Korea (aka Democratic People’s Republic of Korea or DPRK) have been linked to attacks targeting organizations and individuals in the Web3 and cryptocurrency space. “The focus on Web3 and cryptocurrency appears to be primarily financially motivated due to the heavy sanctions that have been placed on North…
Resource: NY DFS Issues New Cybersecurity Guidance to Address Risks Associated with the Use of Third-Party Service Providers
Bys sFrom NY DFS: New York State Department of Financial Services (DFS) Acting Superintendent Kaitlin Asrow today issued new cybersecurity guidance addressing the risks associated with entities becoming increasingly reliant on third-party service providers (TPSPs). The guidance builds on the Department’s ongoing work to protect New Yorkers and DFS-regulated entities from cybersecurity risks through its nation-leading……