Cedric Pernet

France, The Abyss

Senior Threat Researcher at Trend Micro

Senior Threat Researcher@Trend Micro. Cybercrime. Metal dude. Guitars, motorcycles fan.Wrote a book in French language on cyberespionage. Ex-Law Enforcement.

Featured in: Favicon

techrepublic.com Favicon

msn.com

flipboard.com Favicon

trendmicro.com Favicon

newsbreak.com Favicon

globalsecuritymag.fr Favicon

globalsecuritymag.com

Articles

Increasing Awareness of DNS Hijacking: A Growing Cyber Threat

Nov 6, 2024 | techrepublic.com | Cedric Pernet

A recent report from Palo Alto Networks’s Unit 42 exposes the persistent and evolving threat of DNS hijacking, a stealthy tactic cybercriminals use to reroute internet traffic. By leveraging passive DNS analysis, the cybersecurity company also provided real-world examples of recent DNS hijacking attacks — highlighting the urgency of countering this hidden danger. What is DNS hijacking?
Midnight Blizzard Escalates Spear-Phishing Attacks

Oct 31, 2024 | techrepublic.com | Cedric Pernet

Microsoft Threat Intelligence has uncovered a new attack campaign by Russian threat actor Midnight Blizzard, targeting thousands of users across over 100 organizations. The attack leverages spear-phishing emails with RDP configuration files, allowing attackers to connect to and potentially compromise the targeted systems. The attack campaign targeted thousands of users in higher education, defense, non-governmental organizations, and government agencies.
Law Enforcement Operation Targets Infostealers

Oct 30, 2024 | techrepublic.com | Cedric Pernet

In a sweeping international effort, the U.S. Department of Justice, the Federal Bureau of Investigation, and multiple global law enforcement agencies have exposed “Operation Magnus,” targeting two of the world’s most notorious information-stealing malware networks, RedLine Stealer and META. According to a press release published on Oct. 29, the operation led to the seizure of multiple servers, the unsealing of charges against a RedLine Stealer developer, and the arrest of two suspects in Belgium.
Threat Actors Are Exploiting Vulnerabilities Faster Than Ever

Oct 23, 2024 | techrepublic.com | Cedric Pernet

New research by cybersecurity firm Mandiant provides eyebrow-raising statistics on the exploitation of vulnerabilities by attackers, based on the analysis of 138 different exploited vulnerabilities that were disclosed in 2023. The findings, published on Google Cloud’s blog, reveals that vendors are increasingly being targeted by attackers, who are continually reducing the average time to exploit both zero-day and N-day vulnerabilities.
Zscaler Report: Mobile, IoT, and OT Cyber Threats Surge in 2024

Oct 16, 2024 | techrepublic.com | Cedric Pernet

A new report from cloud security company ZScaler sheds light on the growing mobile threats on Android operating systems, as well as IoT and OT devices threats. The findings come as more than 60% of the global Internet traffic is now generated by mobile devices and financially-oriented mobile threats have grown by 111% over the last year.
AI Medical Advice Risks: 22% Harm Rate with Copilot Use

Oct 15, 2024 | techrepublic.com | Cedric Pernet

A new study based on Microsoft’s Bing AI-powered Copilot reveals the need for caution when using the tool for medical information. The findings, published in Scimex, show that many of the chatbot’s responses require advanced education to comprehend fully, and nearly 40% of its recommendations conflict with scientific consensus. Alarmingly, nearly 1 in 4 answers were deemed potentially harmful, with the risk of causing severe harm or even death if followed.
US, Microsoft Aim to Disrupt Russian threat actor ‘Star Blizzard’

Oct 7, 2024 | techrepublic.com | Cedric Pernet

New reports from both Microsoft’s Digital Crimes Unit and the U.S. Department of Justice expose a disruptive operation against more than 100 servers used by “Star Blizzard” — a Russian-based cyber threat actor specializing in compromising email boxes to exfiltrate sensitive content or interfere with the target’s activities. Who is Star Blizzard? The threat actor has been active since at least late 2015, according to a report from cybersecurity company F-Secure.
China-Linked Attack Hits 260,000 Devices, FBI Confirms

Sep 19, 2024 | techrepublic.com | Cedric Pernet

A new joint cybersecurity advisory from the Federal Bureau of Investigation, Cyber National Mission Force, and National Security Agency exposes new activity from the Flax Typhoon threat actor. The cyberattackers have compromised more than 260,000 Small Office/Home Office (SOHO) routers, firewalls, Network-attached Storage, and Internet of Things devices to create a botnet capable of launching Distributed Denial of Service attacks or targeted attacks aimed at U.S. networks. Who is Flax Typhoon?
Iran Cyber Attack: Fox Kitten Facilitates Ransomware in US

Sep 4, 2024 | techrepublic.com | Cedric Pernet

A new joint cybersecurity advisory from the Federal Bureau of Investigation, the Cybersecurity and Infrastructure Security Agency, and the Department of Defense Cyber Crime Center exposed new information about the infamous Iran-based threat actor known as Fox Kitten. The group sells the corporate access they obtain in cybercriminal’s underground forums and collaborates actively with ransomware affiliates to assist in ransoming victims.
Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion

Sep 4, 2024 | trendmicro.com | Cedric Pernet |Jaromír Hořejší

Malware Earth Lusca Uses KTLVdoor Backdoor for Multiplatform Intrusion While monitoring Earth Lusca, we discovered the threat group’s use of KTLVdoor, a highly obfuscated multiplatform backdoor, as part of a large-scale attack campaign.