SWEED: Exposing years of Agent Tesla campaigns

By Talos Group By Edmund Brumaghin and other Cisco Talos researchers. Executive summary Cisco Talos recently identified a large number of ongoing malware distribution campaigns linked to a threat actor we’re calling “SWEED,” including such notable malware as Formbook, Lokibot and Agent Tesla. Based on our research, SWEED — which has been operating since at […]

Threat Roundup for July 5 to July 12

By Talos Group Today, Talos is publishing a glimpse into the most prevalent threats we’ve observed between July 5 and July 12. As with previous roundups, this post isn’t meant to be an in-depth analysis. Instead, this post will summarize the threats we’ve observed by highlighting key behavioral characteristics, indicators of compromise, and discussing how […]

Machen Sie Ihre Mitarbeiter zur Firewall

Sensibilisieren Sie Ihre Mitarbeiter wirksam für IT-Risiken – mit den Online Security Awareness Trainings von G DATA. Phishing, Social Engineering, Brute-Force-Attacken: Viele Cyber-Angriffe nutzen ungeschulte Mitarbeiter als Schwachstelle aus. Hacker schicken unter falschem Vorwand Rechnungen, die Spionage Software auf den PC laden oder entschlüsseln in kürzester Zeit zu einfach gewählte Passwörter. Die Schulung im E-Learning-Format umfasst […]

Cisco Threat Response Plugin: Defeat Threats With Just a Few Clicks

By Ben Greenbaum One of the best tools in your SOC’s arsenal is something you might already have access to and didn’t even have to pay for. If you already deploy Cisco Umbrella, AMP for Endpoints, Firepower devices, next-generation intrusion prevention system (NGIPS), Email Security, or Threat Grid, then you can immediately access Cisco Threat […]

Should governments pay extortion payments after a ransomware attack?

By Talos Group When it comes to ransomware attacks this year, it’s been a tale of three cities. In May, the city of Baltimore suffered a massive ransomware attack that took many of its systems down for weeks — restricting employees‘ access to email, closing online payment portals and even preventing parking enforcement officials from […]

The Future of the Firewall is Not a Firewall

By TK Keanini I have seen the future of the firewall and it is not a firewall! Firewalls have been with us since the late 1980s and they have become synonymous with access control. It is time to redefine that relationship because while access control will remain a need from now into the distant future, […]

Sea Turtle Keeps on Swimming

By Talos Group By Danny Adamitis with contributions from Paul Rascagneres. Executive summary After several months of activity, the actors behind the “Sea Turtle” DNS hijacking campaign are not slowing down. Cisco Talos recently discovered new details that suggest they regrouped after we published our initial findings and coverage and are redoubling their efforts with […]