Madison Steel

Featured in: Favicon

securityboulevard.com

Articles

Mustang Panda Archives

Jan 15, 2025 | securityboulevard.com | Jeffrey Burt |Madison Steel

A Chinese-based threat group called Mustang Panda was using a variant of the PlugX malware to infected U.S. Windows computers and steal information. The FBI, with help from French authorities and a ...
Testing Your Security Against QakBot and Black Basta Ransomware

May 29, 2024 | securityboulevard.com | Madison Steel

IntroductionSmall and medium-sized businesses (SMBs) are increasingly becoming targets for sophisticated cyberattacks. One of the emerging threats observed in recent years is the combination of QakBot, Cobalt Strike, and SystemBC leading to the deployment of Black Basta ransomware. At AttackIQ, we understand the importance of proactive security measures, which is why we've introduce our latest package for testing your defenses against these advanced threats using AttackIQ Flex.
living off the land Archives

May 8, 2024 | securityboulevard.com | Tony Bradley |Madison Steel |Dirk Schrader |Alex Holland

QakBot, also recognized as Qbot, Quackbot, Pinkslipbot, and TA570, has etched its name among other cyber threats, leaving a trail of thousands of malware infections globally. Dive in as we explore QakBot's ...
Gootloader Attacks Healthcare Down Under

May 1, 2024 | securityboulevard.com | Madison Steel

As cyber threats continue to proliferate worldwide, no sector remains immune to the risk of malicious attacks. Down under, in Australia, the healthcare sector finds itself at the forefront of these challenges. Developments have unveiled a concerning trend: threat actors like Gootloader are setting their sights on Australian healthcare institutions, exploiting vulnerabilities with cunning precision.
Operation Sharpshooter

Apr 17, 2024 | securityboulevard.com | Madison Steel

Operation Sharpshooter is one of the most significant cyberattacks orchestrated by the North Korean-based adversary known as Lazarus Group. Conducted between October and November 2018, the operation targeted multiple sectors, particularly finance, energy, and defense, affecting over 80 organizations worldwide, with a primary impact on the United States. This blog post will explore the operation's details, attack methods, and its broader implications.
Intercept the Adversary: Lazarus Group

Apr 10, 2024 | securityboulevard.com | Madison Steel

IntroductionStemming from the Latin roots "inter" meaning "between" or "among," and "cept" denoting "to take" or "to seize," interception encapsulates the act of seizing or capturing something passing between entities. Specifically, in cybersecurity, interception refers to capturing or diverting communications or data between parties. This interception serves multifaceted purposes, including surveillance, analysis, and ensuring security measures.
Cyber Sorcery: Confronting Lazarus Group

Apr 4, 2024 | securityboulevard.com | Madison Steel

In September 2022, cybersecurity researchers at Cisco Talos made a significant discovery: a new Remote Access Trojan (RAT) dubbed "MagicRAT." This malicious tool, attributed with moderate confidence to the Lazarus Group, a state-sponsored Advanced Persistent Threat (APT) associated with North Korea by the U.S. Cyber Security & Infrastructure Agency (CISA), poses a grave threat to organizations worldwide.
Beneath the Shadows: DarkGate

Mar 27, 2024 | securityboulevard.com | Madison Steel

In the realm of cybersecurity, few threats loom as ominously as DarkGate. Since its emergence in 2018, this insidious loader has evolved into a formidable adversary, striking fear into the hearts of financial and manufacturing sectors alike. At the heart of this threat lies the perilous combination of Drive-by Downloads and DanaBot deployment, a duo that demands immediate attention from cybersecurity professionals worldwide.
The Shape Shifting Cameleon: QakBot

Feb 7, 2024 | securityboulevard.com | Madison Steel

Much like the enigmatic Mystique from X-Men or the elusive T-1000 from Terminator, QakBot possesses a chameleon-like quality, seamlessly adapting its form to confound defenses. QakBot, also recognized as Qbot, Quackbot, Pinkslipbot, and TA570, has etched its name among other cyber threats, leaving a trail of thousands of malware infections globally.