TTPs – TFun dot org

The hateful eight: Kaspersky’s guide to modern ransomware groups’ TTPs

23/06/2022RedOne

These days ransomware analysis gets a lot of coverage in commercial and public reports, with vendors issuing dozens of ransomware-related publications each year. These reports provide analysis on specific malware families or new samples, describe the activities of a particular ransomware group, give general tips on how to prevent ransomware from working, and so on. […]

Years-Long Attack by Chinese-Linked APT Groups Discovered by McAfee

17/09/2021ishaan

A cyber-attack that had been sitting on the target organization’s network for years stealing data was discovered during a McAfee investigation into a suspected malware infection. The sophisticated threat actors utilized a mix of known and novel malware tools in the attack, called Operation Harvest, to infiltrate the victim’s IT infrastructure, exfiltrate data, and […]

The FBI has Issued a Warning About the Hive Ransomware Gang

29/08/2021ishaan

The Federal Bureau of Investigation (FBI) has issued a security alert regarding the Hive ransomware attacks, which provides technical data and indicators of compromise related to the gang’s operations. The gang recently targeted Memorial Health System, which was compelled to shut down some of its activities. The new Hive ransomware, according to John […]

CISA Published MARs on Samples Targeting Pulse Secure Devices

28/08/2021ishaan

Five new research reports outlining malware detected on compromised Pulse Secure devices were issued this week by the US Cybersecurity and Infrastructure Security Agency (CISA). Adversaries have been targeting Pulse Connect Secure VPN appliances to exploit a variety of vulnerabilities, including CVE-2021-22893 and CVE-2021-22937, which were found earlier this year. CISA issued an alert […]