Blog | Thousand Guards

top of page

Buscar

Web Server Exploits and Mimikatz Target Asian Critical Infrastructure

Web Server Exploits and Mimikatz Target Asian Critical Infrastructure

Web Server Exploits and Mimikatz Target Asian Critical Infrastructure

Javier Conejo del Cerro

10 mar4 Min. de lectura

APT28’s “MeowMeow” Campaign Targets Ukraine with BadPaw Loader

APT28’s “MeowMeow” Campaign Targets Ukraine with BadPaw Loader

APT28’s “MeowMeow” Campaign Targets Ukraine with BadPaw Loader

Javier Conejo del Cerro

5 mar4 Min. de lectura

OAuth Redirect Abuse: When Identity Flows Become Malware Delivery Channels

OAuth Redirect Abuse: When Identity Flows Become Malware Delivery Channels

OAuth Redirect Abuse: When Identity Flows Become Malware Delivery Channels

Javier Conejo del Cerro

5 mar4 Min. de lectura

Silver Dragon’s Silent Reach: Cobalt Strike and Google Drive Power a New APT41 Campaign

Silver Dragon’s Silent Reach: Cobalt Strike and Google Drive Power a New APT41 Campaign

Silver Dragon’s Silent Reach: Cobalt Strike and Google Drive Power a New APT41 Campaign

Javier Conejo del Cerro

4 mar4 Min. de lectura

Trojanized Gaming Tools Deliver Java RAT Through Browsers and Chat Platforms

Trojanized Gaming Tools Deliver Java RAT Through Browsers and Chat Platforms

Trojanized Gaming Tools Deliver Java RAT Through Browsers and Chat Platforms

Javier Conejo del Cerro

2 mar3 Min. de lectura

ScarCruft Bridges Air-Gapped Networks via Zoho WorkDrive and USB Implants

ScarCruft Bridges Air-Gapped Networks via Zoho WorkDrive and USB Implants

ScarCruft Bridges Air-Gapped Networks via Zoho WorkDrive and USB Implants

Javier Conejo del Cerro

2 mar3 Min. de lectura

Aeternum C2: When Botnet Command-and-Control Moves to the Polygon Blockchain

Aeternum C2: When Botnet Command-and-Control Moves to the Polygon Blockchain

Aeternum C2: When Botnet Command-and-Control Moves to the Polygon Blockchain

Javier Conejo del Cerro

27 feb3 Min. de lectura

UAC-0050 Expands Into Western Europe: Spoofed Judicial Domains and RMS-Based Intrusions

UAC-0050 Expands Into Western Europe: Spoofed Judicial Domains and RMS-Based Intrusions

UAC-0050 Expands Into Western Europe: Spoofed Judicial Domains and RMS-Based Intrusions

Javier Conejo del Cerro

25 feb3 Min. de lectura

UnsolicitedBooker Expands to Central Asia: LuciDoor and MarsSnake in Telecom Espionage

UnsolicitedBooker Expands to Central Asia: LuciDoor and MarsSnake in Telecom Espionage

UnsolicitedBooker Expands to Central Asia: LuciDoor and MarsSnake in Telecom Espionage

Javier Conejo del Cerro

24 feb3 Min. de lectura

APT28’s Operation MacroMaze: Webhook Macros and Browser-Based Exfiltration in Europe

APT28’s Operation MacroMaze: Webhook Macros and Browser-Based Exfiltration in Europe

APT28’s Operation MacroMaze: Webhook Macros and Browser-Based Exfiltration in Europe

Javier Conejo del Cerro

24 feb3 Min. de lectura

MuddyWater’s Operation Olalampo: GhostFetch, CHAR and HTTP_VIP Expand Iranian Cyber Espionage in MENA

MuddyWater’s Operation Olalampo: GhostFetch, CHAR and HTTP_VIP Expand Iranian Cyber Espionage in MENA

MuddyWater’s Operation Olalampo: GhostFetch, CHAR and HTTP_VIP Expand Iranian Cyber Espionage in MENA

Javier Conejo del Cerro

23 feb3 Min. de lectura

Massiv: Fake IPTV Apps Powering Full Android Device Takeover Fraud

Massiv: Fake IPTV Apps Powering Full Android Device Takeover Fraud

Massiv: Fake IPTV Apps Powering Full Android Device Takeover Fraud

Javier Conejo del Cerro

20 feb3 Min. de lectura

CRESCENTHARVES: Protest Lures Turned Into Long-Term Espionage

CRESCENTHARVES: Protest Lures Turned Into Long-Term Espionage

CRESCENTHARVES: Protest Lures Turned Into Long-Term Espionage

Javier Conejo del Cerro

19 feb3 Min. de lectura

ZeroDayRAT: When Commercial Spyware Becomes a Real-Time Mobile Surveillance Engine

ZeroDayRAT: When Commercial Spyware Becomes a Real-Time Mobile Surveillance Engine

ZeroDayRAT: When Commercial Spyware Becomes a Real-Time Mobile Surveillance Engine

Javier Conejo del Cerro

17 feb3 Min. de lectura

ClickFix Evolves: DNS-Based Malware Staging Through Nslookup

ClickFix Evolves: DNS-Based Malware Staging Through Nslookup

ClickFix Evolves: DNS-Based Malware Staging Through Nslookup

Javier Conejo del Cerro

16 feb3 Min. de lectura

UAT-9921 and VoidLink: A Modular Cloud Espionage Framework Built for Persistence

UAT-9921 and VoidLink: A Modular Cloud Espionage Framework Built for Persistence

UAT-9921 and VoidLink: A Modular Cloud Espionage Framework Built for Persistence

Javier Conejo del Cerro

16 feb3 Min. de lectura

SSHStalker: When Legacy Linux Becomes a Strategic Botnet Asset

SSHStalker: When Legacy Linux Becomes a Strategic Botnet Asset

SSHStalker: When Legacy Linux Becomes a Strategic Botnet Asset

Javier Conejo del Cerro

13 feb3 Min. de lectura

APT36 & SideCopy: Cross-Platform Espionage Against Indian Strategic Targets

APT36 & SideCopy: Cross-Platform Espionage Against Indian Strategic Targets

APT36 & SideCopy: Cross-Platform Espionage Against Indian Strategic Targets

Javier Conejo del Cerro

12 feb3 Min. de lectura

Warlock Strikes Through the Mail Gateway

Warlock Strikes Through the Mail Gateway

Warlock Strikes Through the Mail Gateway

Javier Conejo del Cerro

11 feb3 Min. de lectura

TeamPCP: When the Cloud Becomes the Worm

TeamPCP: When the Cloud Becomes the Worm

TeamPCP: When the Cloud Becomes the Worm

Javier Conejo del Cerro

9 feb3 Min. de lectura

bottom of page