First Name

Last Name

Job Title

Company

Country

State

Thank you!

Error - something went wrong!

Weekly Intelligence Summary 17 Jan 2020

January 17, 2020

In the spotlight this week: The cyber-extortion landscape has shown real signs of strength and advancement in the past three months: Many operations have been deploying ransomware (including new variants), but the use of denial of service (DoS) or data breaches in ransom attacks has also been increasingly reported. The method of combining two discrete attack methods to increase the probability of a successful extortion was apparently pioneered by operators of the “Maze” ransomware, and has spread to other cybercriminals and types of ransomware. Given the high profitability of ransomware attacks, especially those incorporating data breaches, they are likely to persist.

Previous Report

Weekly Intelligence Summary 24 Jan 2020

During the past 12 months, Digital Shadows has observed a rise in “mobile malware”―the use of malware targe...

Next Report

Weekly Intelligence Summary 10 Jan 2020

In the spotlight this week: Iranian cyber response neither impossible nor guaranteed

Want these
Threat Intelligence reports sent straight to your inbox?

Subscribe below!

First Name

Last Name

Company

Country

State- optional

Job Title

Thank you!

Error - something went wrong!

Return to Home

Weekly Intelligence Summary 17 Jan 2020

Previous Report

Next Report

Most Recent Flipbooks

A recently discovered campaign has used the legitimate storage services of BitBucket to facilitate malware distribution and increase the perceived trust between an unknown threat actor and a targeted

The recent disclosure of a vulnerability in Citrix devices was quickly followed by multiple exploitations before patches were introduced, reflecting the danger of announcing a critical vulnerability w

The “Fractured Statue” cyber-threat campaign of 2019 has highlighted the difficulties in naming perpetrators based on overlapping tools and tactics. The campaign, carried out over four months and targ

During the past 12 months, Digital Shadows has observed a rise in “mobile malware”―the use of malware targeting mobile devices/operating systems (OS)―as well as legitimate apps used maliciously.

In the spotlight this week: Iranian cyber response neither impossible nor guaranteed

Despite a decline in overall exploit kit activity during 2018 and 2019, several new variants have emerged with new techniques and a geographical focus, making them likely to retain their threatening p

“Lazarus Group” has been linked to a new trojanized Mac OS X application, demonstrating the threat group’s preference for employing OS X malware over the past two years.

The Digital Shadows Intelligence Team discusses the risks of information exposure by Internet users, challenging contemporary thinking about standard security practices.

In the spotlight this week is a technique that enables the bypass of security products to initiate ransomware infections.

Digital Shadows reviewed nation-state–linked advanced persistent threat (APT) activity in 2019, and highlighted several trends. Some are likely to continue into 2020, and will be supplemented by ...

Multiple reports of successful ransomware attacks have highlighted the risk to organizations of all sizes but, despite the media attention, other extortion tactics are being overlooked.

A string of data breach incidents affecting perceptively smaller organizations this week has outlined the need for all companies, regardless of size, to take a proactive security stance in preference

In the spotlight this week: A card skimming operation targeted the online retailer First Aid Beauty and evaded notice for months.

In the spotlight this week: Russia-linked threat group “Turla” was reported to be using cyber-attack tools associated with Iran-linked threat group “APT34”, in conjunction with Turla’s own tools.

In the spotlight this week is the “Simjacker” exploit, publicly disclosed in September 2019 and now potentially affecting entities across 29 countries.

In the spotlight this week is the Iran-linked threat group “APT35”, which took aim at the email accounts of political entities in the United States and prominent Iranians living outside Iran.

In the spotlight this week is a variety of new attack methods demonstrated by “Magecart Five”. The threat group is probably testing them out, and will highly likely implement the most successful metho

In the spotlight this week is a newly identified threat group named Tortoiseshell, which has reportedly conducted supply-chain cyber attack campaigns against 11 IT providers in Saudi Arabia.

The Iran-linked cyber-threat group “Cobalt Dickens” targeted 60-plus universities worldwide with a phishing campaign designed to capture credentials. Higher-education institutions have been popular...

In the spotlight this week: Following reports that “APT3” used Equation Group tools prior to their public leak by the “Shadow Brokers” in 2016, cyber security researchers have provided additional ...