Georgy Kiguradze

Jul 8, 2024 | securelist.com | Sergey Lozhkin |Alexey Antonov |Kaspersky ICS CERT |Georgy Kiguradze

In May 2024, we discovered a new advanced persistent threat (APT) targeting Russian government entities that we dubbed CloudSorcerer. It’s a sophisticated cyberespionage tool used for stealth monitoring, data collection, and exfiltration via Microsoft Graph, Yandex Cloud, and Dropbox cloud infrastructure. The malware leverages cloud resources as its command and control (C2) servers, accessing them through APIs using authentication tokens.

Jun 25, 2024 | securelist.com | Kaspersky ICS CERT |Georgy Kiguradze |Olga Svistunova |Anton Kivva

Small and medium-sized businesses (SMBs) are increasingly targeted by cybercriminals. Despite adopting digital technology for remote work, production, and sales, SMBs often lack robust cybersecurity measures. SMBs face significant cybersecurity challenges . The cost of data breaches can cripple operations, making preventive measures essential. This is a growing tendency that continues to pose a challenge for businesses.

Jun 24, 2024 | securelist.com | Anderson G. Leite |Sergey Belov |Georgy Kiguradze |Olga Svistunova

Part 1: XZ backdoor story – Initial analysisPart 2: Assessing the Y, and How, of the XZ Utils incident (social engineering)In our first article on the XZ backdoor, we analyzed its code from initial infection to the function hooking it performs. As we mentioned then, its initial goal was to successfully hook one of the functions related to RSA key manipulation.

Jun 11, 2024 | securelist.com | David Emm |Dmitry Kachan |Alina Sukhanova |Georgy Kiguradze

Biometric scanners offer a unique way to resolve the conflict between security and usability. They help to identify a person by their unique biological characteristics – a fairly reliable process that does not require the user to exert any extra effort. Yet, biometric scanners, as any other tech, have their weaknesses.