cyberthreat Archivi

New malicious campaign spreading Windows and Linux backdoors

Telsy analyzed a new malicious campaign spreading Linux and Windows backdoors. Introduction This type of campaign starts by exploiting known vulnerabilities related to the target technologies and then performs...

Lazarus Group continues AppleJeus Operation

11 Oct

Telsy analyzed new samples related to the threat actor Lazarus Group and in particular to the “AppleJeus Operation”. Introduction While some of the details have changed, the methods used...

Google Drive abused in document exfiltration operation against Afghanistan

29 Sep

Telsy analyzed a new campaign that targeted Afghanistan and aimed to steal documents. Introduction Telsy last June analyzed a new campaign that targeted Afghanistan, specifically researchers and government employees....

Malware-as-a-Service (MaaS): what it is and why it is (very) dangerous

04 Aug

Malware-as-a-Service (MaaS) refers to the illegal lease of software and hardware for carrying out cyber-attacks. Owners of MaaS servers offer to threat actors a paid botnet service that distributes malwares....

Smart working: how to mitigate cyber risks

07 Apr

Smart working is a fertile ground for cyber threats and criminals. As steps to counter the coronavirus outbreak take effect, millions of workers worldwide have been sent home with their...

Ransomware: a threat to the present and the future

10 Jul

Ransomware has become an increasingly prominent threat to cyberspace security globally and the recent statistical data collected would seem to confirm this trend also for the years to come. ...

Zebrocy relies on dropbox and remote template injection to supply its dishes to an institution of Eastern Europe diplomatic sector.

29 Aug

Introduction On the 22nd of August 2019, a new spear-phishing email message has been collected by Telsy CTI Team. This malicious email has been armed with an attached lure document...

Unknown threat actor is using Agent Tesla variants against Oil&Gas and Energy Sector

12 Jul

On 02/07/2019, Telsy TRT catched a new malware variant belonging to Agent Tesla family addressed to companies operating in the Energy and Oil&Gas sector. Among these organizations, Telsy identifies a...