cyber report Archivi

Microsoft Exchange servers backdoored with OwlProxy

Introduction In early 2022, Telsy observed malicious cyber activity in the Microsoft Exchange infrastructure. The analysis conducted revealed the presence of a malicious DLL, called “fuscom.dll“, and its persistence by...

SideCopy APT: from Windows to *nix

05 Jan

Telsy Threat Intelligence team has observed a spear-phishing campaign conducted by cyber-espionage group SideCopy against critical government entities in India. SideCopy APT: from Windows to *nix As previously published...

Phishing Campaign targeting citizens abroad using COVID-19 theme lures

22 Dec

Telsy Threat Intelligence team has identified a phishing campaign that appears to be targeting citizens abroad by exploiting the COVID-19 theme associated with a potential embassy lockdown status. Introduction...

NOBELIUM again or eCrime operation?

07 Dec

Telsy Threat Intelligence team identified a phishing campaign that seems to target multiple victims based in the United States, Great Britain, and Europe. The campaign appears to have been active since...

Dissecting new AppleSeed backdoor of Kimsuky threat actor

03 Nov

Telsy analyzed the cyber espionage group known as Kimsuky in a particular spear phishing campaign. Introduction The Telsy Threat Intelligence team trackings various threat actors, among them the cyber espionage...

New malicious campaign spreading Windows and Linux backdoors

13 Oct

Telsy analyzed a new malicious campaign spreading Linux and Windows backdoors. Introduction This type of campaign starts by exploiting known vulnerabilities related to the target technologies and then performs...

Lazarus Group continues AppleJeus Operation

11 Oct

Telsy analyzed new samples related to the threat actor Lazarus Group and in particular to the “AppleJeus Operation”. Introduction While some of the details have changed, the methods used...

Telsy’s report on UniCredit’s data breach went viral worldwide

21 Apr

On the evening of April 19, Telsy denounced that the personal data of about 3000 employees of the UniCredit S.p.A. bank, one of the largest banks in Italy, had been...

DeadlyKiss: Hit one to rule them all. Telsy discovered a probable still unknown and untreated APT malware aimed at compromising Internet Service Providers

24 Sep

In the first days of September 2019, Telsy Cyber Threat Intelligence Unit received a variant of a strange and initially mysterious malware from a stream of thousands of samples coming...