Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
New advisory highlights Russian state cyber actors’ global exploitation of.
This article from Broadcom's Symantec presents a MITRE ATT&CK walkthrough focusing on techniques T1140 (Deobfuscate/Decode Files or Information) and T1105 (Remote File Copy). It explores the detection gap associated with these techniques and provides guidance on how to identify and mitigate them.
Broadcom's Symantec examines the detection gap for MITRE ATT&CK techniques T1140 (Deobfuscate/Decode Files) and T1105 (Ingress Tool Transfer). The walkthrough helps improve detection capabilities.
MITRE ATT&CK Walkthrough: T1140 (Deobfuscate/Decode Files or Information), T1105.
This case study from AhnLab ASEC describes the distribution of a CoinMiner targeting Linux SSH servers. The attackers use malware with propagation capabilities, including ShellBot, MIG LogCleaner, and XHide, to install the XMRig CoinMiner.
AhnLab ASEC observed attacks using malware to distribute XMRig CoinMiner on poorly managed Linux servers.