Cyber Threat Intelligence Archivi - Page 3 of 4

Microsoft Exchange servers backdoored with OwlProxy

Introduction In early 2022, Telsy observed malicious cyber activity in the Microsoft Exchange infrastructure. The analysis conducted revealed the presence of a malicious DLL, called “fuscom.dll“, and its persistence by...

What is the Cyber Threat Intelligence?

11 Apr

In the nowadays cybersecurity paradigm, Cyber Threat Intelligence plays a leading role. Reactive malware detection tools, firewalls, and analysis through artificial intelligence are not enough: to ensure the security of...

NOBELIUM again or eCrime operation?

07 Dec

Telsy Threat Intelligence team identified a phishing campaign that seems to target multiple victims based in the United States, Great Britain, and Europe. The campaign appears to have been active since...

Possible attack to Telco company in Middle East

24 Nov

Telsy Threat Intelligence team identified a possible Grunt Covenant multi-stage attack aimed at a major telecommunications company in Iran. Introduction In this article, we will look at the different steps...

Dissecting new AppleSeed backdoor of Kimsuky threat actor

03 Nov

Telsy analyzed the cyber espionage group known as Kimsuky in a particular spear phishing campaign. Introduction The Telsy Threat Intelligence team trackings various threat actors, among them the cyber espionage...

New malicious campaign spreading Windows and Linux backdoors

13 Oct

Telsy analyzed a new malicious campaign spreading Linux and Windows backdoors. Introduction This type of campaign starts by exploiting known vulnerabilities related to the target technologies and then performs...

REMCOS and Agent Tesla loaded into memory with Rezer0 loader

15 Sep

An Italian government email has been targeted by a phishing campaign. The attack’s goal aimed to install some remote control and information-stealing tool. What’s happened During the last month,...

Machine Learning: why is vital for cybersecurity

07 Jun

Machine learning is becoming more vital than ever in today’s – and tomorrow’s -cybersecurity. Being a subset of AI, machine learning consists of the techniques that enable computers to figure...

SolarWinds Attack: Italy activates the Cyber Security Nucleus

13 Jan

Following a tampering with a number of SolarWinds Orion platform updates in March, hackers have infiltrated the networks and computer systems of government and private entities around the world by...

When a false flag doesn’t work: Exploring the digital-crime underground at campaign preparation stage

11 Dec

At the beginning of October 2020 we found copy of a malicious document potentially to be attributed to an APT group known with the name of APT34 / OilRig. The...

Microsoft Exchange servers backdoored with OwlProxy

What is the Cyber Threat Intelligence?

NOBELIUM again or eCrime operation?

Possible attack to Telco company in Middle East

Dissecting new AppleSeed backdoor of Kimsuky threat actor

New malicious campaign spreading Windows and Linux backdoors

REMCOS and Agent Tesla loaded into memory with Rezer0 loader

Machine Learning: why is vital for cybersecurity

SolarWinds Attack: Italy activates the Cyber ​​Security Nucleus

When a false flag doesn’t work: Exploring the digital-crime underground at campaign preparation stage

SolarWinds Attack: Italy activates the Cyber Security Nucleus