Threat Intelligence

Meet Speagle, a mysterious new threat designed to infect users of a Chinese security software package and then hunt for information on Chinese ballistic missiles. security.com/threat-intelli… #espionage #cobradocguard #missile

Libyan Oil Refinery Among Targets in Long-running Likely Espionage Campaign in Which #AsyncRAT Backdoor Deployed: Telecoms Org and State Institution also hit. Read more: security.com/threat-intelli… #Libya #cybersecurity #oil

#ThreatProtection #Winos4.0 #malware distributed as a fake KakaoTalk installer, read more about Symantec's protection: broadcom.com/support/securi…

#NEW - Libyan Oil Refinery Among Targets in Long-running Likely Espionage Campaign in Which AsyncRAT Backdoor Deployed. Read more: security.com/threat-intelli… #cyberattack #Libya

#ThreatProtection #Perseus #mobile #malware, read more about Symantec's protection: broadcom.com/support/securi…

One version of Speagle searches for files related to ballistic missiles. Dongfeng-27 (aka CSS-X-24) is a Chinese ballistic missile. Other keywords translate to “cruise missile”, “supersonic”, “hypersonic”, “thermal protection system”, and “warhead” security.com/threat-intelli…

#ThreatProtection LATAM-targeted #Horabot ops are ramping up: PowerShell spreaders, Delphi-based trojans, and polymorphic scripts drive a stealthy, self-propagating financial threat, read more about Symantec's coverage: broadcom.com/support/securi…

#ThreatProtection Recent activities attributed to the #SeedWorm threat group, read more about Symantec's protection: broadcom.com/support/securi… #muddywater #malware

#ThreatProtection #DrillApp #backdoor, read more about Symantec's protection: broadcom.com/support/securi… #malware

#ThreatProtection #SnappyClient, a stealthy C2 implant with a focus on #cryptocurrency theft, read more about Symantec's coverage: broadcom.com/support/securi…

#ThreatProtection Fake #FileZilla installers lead to infection with a Remote Access Trojan (#RAT), read more about Symantec's protection: broadcom.com/support/securi… #malware

#ThreatProtection #Vidar #stealer spreads via deceptive GitHub and Reddit gaming lures and hides C2 traffic in Telegram and Steam, read more about Symantec's coverage: broadcom.com/support/securi…

#ThreatProtection #Warlock #ransomware group incorporates #BYOVD and usage of TightVNC to its TTPs, read more about Symantec's coverage: broadcom.com/support/securi…

#ThreatProtection #Hyrax #malware distributed in #SEO poisoning operation attributed to the #Storm-2561 threat group, read more about Symantec's protection: broadcom.com/support/securi…

#ThreatProtection VENON is a newly reported Brazilian banking trojan written in Rust. Read more about Symantec’s protection: broadcom.com/support/securi…

#ThreatProtection #DoubleDonut loader leveraged for the delivery of various infostealing payloads, read more about Symantec's protection: broadcom.com/support/securi… #malware #infostealer

#ThreatProtection #GibCrypto #malware, read more about Symantec's protection: broadcom.com/support/securi…

#ThreatProtection Iranian state-backed operators are increasingly relying on #MaaS ecosystems—using off-the-shelf malware to enable scalable cyber operations, read more about Symantec's coverage: broadcom.com/support/securi…

#ThreatProtection #TAXISPY #RAT mobile #malware, read more about Symantec's protection: broadcom.com/support/securi…

#ThreatProtection Multi-staged #Remcos #RAT deployment campaign, read more about Symantec's protection: broadcom.com/support/securi… #malware