Cobalt Gang Using CobInt Downloader to Install Malware on Systems of Interest
Security researchers observed the threat group Cobalt Gang using a downloader known as CobInt to infect and subsequently install additional malware on systems of interest.
How a Cyberattack Framework Can Help Reduce Risk at All Levels, Part 4
Even after a successful attack, security teams can still minimize the financial and reputational damage associated with a breach by following the IBM X-Force cyberattack framework.
How a Cyberattack Framework Can Help Reduce Risk at All Levels, Part 3
An attacker who gains access won't necessarily walk away with an organization's proprietary data. Here's how a cyberattack framework can help you subvert an attacker already in a network.
Threat Report Provides Evidence of Threat Actors Targeting ERP Applications
According to a new report, threat actors are targeting enterprise resource planning (ERP) applications like SAP — and, in some cases, are exploiting a vulnerability that was disclosed in 2016.
New Encrypted Downloader Leverages Old-School Macro Malware to Gain Backdoor Access
According to a recent threat advisory, cybercriminals have combined a new encrypted downloader with old-school macro malware to gain backdoor access to victims' machines.
RANCOR Threat Group Leverages New Malware Strains in Targeted Espionage Attacks
Threat group RANCOR is leveraging new malware strains to conduct targeted espionage in Southeast Asia, according to a recent report.
How a Cyberattack Framework Can Help Reduce Risk at All Levels, Part 2
In the external reconnaissance and launch attack phases of the X-Force IRIS cyberattack preparation framework, threat actors look for vulnerabilities and tailor their attacks to exploit them.
Threat Actors Exploit New Drupal Flaw to Deliver Cryptocurrency Mining Malware
In the process of fixing a flaw discovered in March 2018, security researchers from Drupal discovered another vulnerability that could enable threat actors to deliver cryptocurrency mining malware.
Unsecured Third-Party Access Puts Personal Data at Risk
A July 2018 threat report from IBM X-Force Exchange revealed that threat group Magecart exploited unsecured third-party access to steal credit card details from Ticketmaster customers.
Dark Web ‘RDP Shops’ Offer Access to Vulnerable Systems for as Little as $3
According to July 2018 research, cybercriminals are offering remote desktop protocol (RDP) access to compromised networks at major airports, healthcare institutions and more for under $20.