In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.
- Securonix Threat Labs are reporting that threat actors working as part of the DB#JAMMER attack campaigns are compromising exposed MSSQL databases using brute force attacks.
- Morphisec are reporting a previously unknown version of the Chae$ malware.
- AhnLab’s Security Emergency Response Center are reporting on threat actors using phishing emails to distribute some fileless malware.
- The researchers over at Group-IB have uncovered a covert business email compromise phishing campaign targeting Microsoft 365.
- NSFOCUS Security Labs captured a new APT34 phishing attack against enterprise targets that released a variant of the SideTwist Trojan to achieve long-term control of the victim host.
- Threat Analysis Group publicly disclosed a campaign from government-backed actors in North Korea who used 0-day exploits to target security researchers working on vulnerability research and development.
The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.