Black Basta Team and double extortion ransomware attacks

Protect smartphones and tablets from cyber risks: the mobile security

 View all

BLOG

Discover, learn more and keep up to date on the trends and latest news in the world of cybersecurity and cryptography.

Spotlight
Black Basta Team and double extortion ransomware attacks

Threat Discovery is an editorial space of Telsy and TS-WAY dedicated to in-depth analysis of cyber threat intelligence at a global level. The information reported is the outcome of the...

 Read more
LEGAL
CYBERSECURITY
CYBER THREAT INTELLIGENCE
CRYPTOGRAPHY
QUANTUM
NEWS
EVENTS
All articles
LEGAL
CYBERSECURITY
CYBER THREAT INTELLIGENCE
CRYPTOGRAPHY
QUANTUM
NEWS
EVENTS
All articles
Sort by:
From older
From most recent
CYBERSECURITY, CYBER THREAT INTELLIGENCE
Black Basta Team and double extortion ransomware attacks

Threat Discovery is an editorial space of Telsy and TS-WAY dedicated to in-depth analysis of cyber threat intelligence at a global level. The information reported is the outcome of the...
CYBERSECURITY
Protect smartphones and tablets from cyber risks: the mobile security

Smartphones, tablets, smartwatches, and in general all so-called “smart” devices, are today indispensable tools for companies, public administration, and private citizens.The mobility and immense technological capabilities of these devices actually...
CYBERSECURITY, CYBER THREAT INTELLIGENCE
APT29: focus on a Russian state-sponsored opponent

Threat Discovery is an editorial space of Telsy and TS-WAY dedicated to in-depth analysis of cyber threat intelligence at a global level. The information reported is the outcome of the...
NEWS
Telsy’s website is carbon neutral

Over the course of 2023 Telsy website, together with our Group’s main websites, with almost 490 million total page views, generated around 397 tonnes of CO2eq, as much as would...
CRYPTOGRAPHY, QUANTUM
Classic McEliece: key encapsulation based on codes

Introduction At the end of the third round of the NIST standardization process, the CRYSTALS-Kyber key encapsulation method aimed at replacing the current ECDH scheme was selected. NIST then defined...
LEGAL, CYBERSECURITY
Challenges, opportunities, and solutions for the NIS2 Directive  

In January 2023, EU Member States formally issued a revision to the 2016 Network and Information Systems (NIS) security Directive.   Conceived in response to several widely publicized and damaging cyber-attacks,...
CRYPTOGRAPHY
Security for offline conversations: TelsyATMO

Protecting our data and communications from cyber risks is, now more than ever, extremely important to secure the content we exchange.   In fact, many dangers can lurk around the corner,...
CYBERSECURITY, CRYPTOGRAPHY, NEWS
The Made-in-Italy Secure Microchip

With the growing quantity and quality of cyber attacks and cybercrime, the security of devices, data, and communications exchanged by companies, institutions, and private citizens is constantly at risk. When...
CRYPTOGRAPHY, QUANTUM
The math behind the PQC: Syndrome Decoding Problem

Introduction Cryptographic schemes starring in the NIST standardization process belonging to the code-based cryptography family are constructed from a problem called the Decoding Problem. Given a code and a vector,...
CRYPTOGRAPHY, QUANTUM
The mathematics behind PQC: the codes

Introduction In addition to lattices, the foundation of lattice-based cryptography, another mathematical structure used to construct post-quantum cryptography schemes is error-correcting codes, more briefly codes. The codes originated in the...
CRYPTOGRAPHY, QUANTUM
New post-quantum digital signature proposals: the second NIST competition

Introduction In July 2023, NIST announced four winning algorithms in the post-quantum competition, marking an important step forward in the transition process. The selected algorithms were CRYSTALS-Kyber for key negotiation...
CYBERSECURITY, CYBER THREAT INTELLIGENCE
TS-Intelligence: The Advanced Cyber Threat Intelligence Platform from Telsy and TS-WAY  

In the ever-evolving digital age, cybersecurity has become a must-have priority for organizations of all sizes and industries.      The increasing frequency and sophistication of cyber-attacks threaten sensitive data, reputation,...
CRYPTOGRAPHY
Secure collaboration

In the office, on the road, at home, and in many other places, we often use tools and devices constantly connected to the Internet.   This condition has greatly increased...
CRYPTOGRAPHY, QUANTUM
Falcon: digital signature based on NTRU

Introduction NIST’s Post-Quantum standardization process has identified two cryptographic schemes based on lattice theory within digital signatures: CRYSTALS-Dilithium and Falcon. Within modern cryptographic communication protocols, these solutions will replace the...
CYBERSECURITY
The security of mobile devices: TelsyMobileDefender

Smartphones are today an indispensable tool for businesses, expanding the perimeter to be defended and the risks to be prevented to avoid harm. Careless or unsafe use of mobile devices...
CYBERSECURITY, CYBER THREAT INTELLIGENCE
Red Teaming

Red Teaming is an ethical hacking methodology that helps assess a company’s ability to detect, prevent and respond to sophisticated and targeted threats, as well as identify and quantify existing...
CYBERSECURITY
Enhancing Healthcare Cybersecurity – TelsyMediSOC

In an industry where a vulnerability can lead to financial losses and to potentially life-threatening incidents, being prepared to defend against cyber threats becomes imperative. In this context, healthcare organizations...
CYBERSECURITY
The Spyware

Spyware are a type of software that collects information regarding a user’s activity without its consent. The term is often used to define a wide range of malware with the...
CRYPTOGRAPHY, QUANTUM
CRYSTALS-Dilithium: LWE-based digital signature

Introduction NIST’s Post-Quantum standardization process identified two cryptographic schemes to be intended as “primary” solutions. With regard to Key Encapsulation Mechanisms (KEMs), key derivation schemes, CRYSTALS-Kyber was selected, while from...
CYBERSECURITY
eXtended Detection and Response (XDR)

The trend of cyber attacks shows a steady growth in terms of volume and sophistication. Every organization, especially small and medium-sized ones, cannot cope with the critical issues of monitoring...
CYBERSECURITY
The Security Operations Center (SOC)

A Security Operations Center (SOC) consists of an in-house (or outsourced) team of cybersecurity professionals equipped with sophisticated technologies that monitor an organization’s IT infrastructure, 24 hours a day, 7...
CRYPTOGRAPHY, QUANTUM
CRYSTALS-Kyber: LWE-based key encapsulation

Abstract In the context of the NIST standardization process for identifying and analyzing Post-Quantum Cryptography (PQC) solutions, the first crucial outcome is the selection of the key encapsulation mechanism (KEM)...
CYBERSECURITY
Risk Analysis and VAPT: how to manage cyber risk

Companies and organizations are constantly looking for ways to protect their data and online activities from cyber risk. The inescapable use of the Web and new ways of collaboration have...
CYBERSECURITY, CYBER THREAT INTELLIGENCE
Cyber Threat Intelligence: knowing and anticipating threats

Success in the digital age depends on the ability to validate complex information and leverage it to lead change. For organizations, it is today necessary to equip themselves with tools...
CRYPTOGRAPHY, QUANTUM
The Math Behind PQC: Learning With Errors

Introduction Some of the winning cryptographic schemes in the NIST standardization process belonging to the latex-based cryptography family are constructed from a problem called Learning With Errors (LWE). Given a...
CYBERSECURITY
Security Awareness: how to avoid the dangers of cybersecurity with TelsySkills

Being aware of the existence of real danger and the consequences it entails on multiple levels is – itself – a tool to defend against it, to protect ourselves. This...
CYBERSECURITY
The Triple Cyber Threat: Borat RAT

Recently a US cyber risk intelligence company has discovered a new Remote Access Trojan (RAT) malware. RAT malware typically helps cybercriminals gain complete control of a victim’s system, permitting them...
NEWS
Telsy website is Carbon Neutral

TIM Group offsets the climate impact of its websites with certified international project During 2022, our Group’s main websites, with around 680 million total page views, generated around 554 tonnes...
CYBERSECURITY
Security Monitoring: protecting your business from cyber threats

Hackers or malware, careless or disgruntled employees, outdated or vulnerable devices and operating systems, public and mobile cloud computing, or third-party service providers: in the normal course of business, most...
CRYPTOGRAPHY, QUANTUM
The mathematics behind PQC: lattices

Introduction A large number of post-quantum cryptography schemes are built on a mathematical structure called “lattice“, on which hard-to-solve problems can be defined even for a quantum computer. Cryptosystems belonging...
CYBERSECURITY
Cyber Threat Investigation and Threat Hunting

According to the Verizon Data Breach Investigation Report (DBIR), advanced threats hide in environments undetected, often for months, as they stealthily try to gather valuable information or data to compromise....
CYBERSECURITY
ICT Risk Management: how to set up your cyber defenses

IT security is a complex and evolving field and needs a systemic approach to managing cyber incidents. These incidents do not always concern malicious attacks, but can be the result...
CYBERSECURITY
The Cyber Vulnerabilities

The fast evolution of the international scenario puts companies in front of new challenges. These challenges are closely related to security, staff preparation and the constant growth of cyber vulnerabilities....
CYBERSECURITY
The Cyber Incident Response

Every day thousands of companies have to face the growing threat of cybercrime and Security Incidents, with consequent waste of time and money. In the modern corporate landscape, we have...
CYBER THREAT INTELLIGENCE
Microsoft Exchange servers exploited with OWASSRF

Executive Summary In December 2022, Telsy Incident Response Team was called upon to handle a cyber security incident. The analysis conducted detected the execution of PowerShell code by exploiting a...
CYBERSECURITY
Decision Intelligence: a tool for the security of people and companies

Having large volumes of data available is essential when it comes to security. Even more central is the ability to know how to read, analyze and process these data, or...
CRYPTOGRAPHY
One-Way and Trapdoor Functions: The Heart Of Modern Encryption

Introduction A one-way function is, by definition, a mathematical function that is easy to calculate but computationally difficult to invert. In other words, inverting a one-way function is equivalent to...
QUANTUM
Quantum Key Distribution (QKD) and security

In the collective imagination, quantum computing has been relegated to science fiction for many years, but thanks to recent developments in technologies and substantial investments by major players, we are...
CYBERSECURITY, CRYPTOGRAPHY
The videoconference vulnerabilities

As for business meetings or for hearing the family from all corners of the world, many people use video conferencing to connect with others and will likely continue to do...
CYBERSECURITY
Cyber, physical and reputational risks exposure

The growing online presence of personal data on platforms, social networks, digital collaboration tools and so on increases, the risks exposure associated with this availability is also increased. From a...
CRYPTOGRAPHY, QUANTUM
Quantum Key Distribution (QKD) and Post-Quantum Cryptography (PQC)

Today the quantum attacks threat is a real danger. The protection of data and communications is linked to technologies that give future-proof answers, capable of thwarting threats with still partially...
CRYPTOGRAPHY
Secure communications: end-to-end encryption (E2EE)

End-to-end encryption is a message encryption method based on asymmetric encryption algorithms and the decentralization of cryptographic keys. Is an encrypted communication system in which only people who are communicating...
CYBERSECURITY
Decision Intelligence and security: VIP digital protection

Having large volumes of data available is essential when it comes to security. Even more central is the ability to know how to read, analyze and process these data, or...
CRYPTOGRAPHY, QUANTUM
Digital signature algorithms: present and future

Abstract The digital signature is, in many respects, the analogue in the digital world of the handwritten signature that we all use on a daily basis. The main difference between...
CYBERSECURITY
Endpoint Detection & Response (EDR)

The evolution of cyber attacks in terms of frequency and attack methods (multi-channel and multi-target), as well as the ongoing digitalization process, exposes organizations to vulnerabilities that weaken continuity plans,...
CRYPTOGRAPHY
Videoconference and security

In a historical moment in which virtual meetings are becoming the main means of communication, both in the workplace and in the school environment, it is necessary and essential to...
CYBERSECURITY
What Is Decision Intelligence?

Decision Intelligence (DI) is a practical discipline that aims to support decision making by understanding and engineering the intelligence process, driving the decision-making process and the evaluation (and improvement, through...
CYBER THREAT INTELLIGENCE
Microsoft Exchange servers backdoored with OwlProxy

Introduction In early 2022, Telsy observed malicious cyber activity in the Microsoft Exchange infrastructure. The analysis conducted revealed the presence of a malicious DLL, called “fuscom.dll“, and its persistence by...
CRYPTOGRAPHY, QUANTUM
Quantum Key Distribution (QKD): a disruptive technology

The quantum computing development and the prospect of its widespread diffusion are challenging the existing classical cryptography protocols security. At the same time, the advent of quantum computers has given...
CYBERSECURITY
The Cybersecurity Awareness

Being aware of the existence of a danger and the consequences that this entails is the first defense tool. Cybersecurity awareness transforms employees into the first line of defense against...
CRYPTOGRAPHY, QUANTUM
Key Negotiation in the Post-Quantum Era

Introduction Cryptography, understood as the set of information protection schemes, is typically divided into symmetric or private key cryptography and asymmetric or public key cryptography. Schemes or protocols that exploit...
CRYPTOGRAPHY
Cryptophones: what they are and how they work

The issue of mobile communication security highlights one of the weak links in the security chain of organizations. It is often the behavior of individual employees, not necessarily malicious but...
CYBERSECURITY
The CryptoLocker ransomware

CryptoLocker is a ransomware capable of blocking documents on your computer by encrypting them with a password and making it impossible to open files, a malicious software that infects Windows...
CYBERSECURITY
The Lateral Movement

Lateral movement refers to the techniques that a cyber attacker uses, after gaining initial access, to move deeper into a network in search of sensitive data and other high-value assets....
CYBERSECURITY
The TrickBot malware

TrickBot (or “TrickLoader”) is a banking Trojan that targets both businesses and consumers for their data, such as banking information, account credentials, personally identifiable information (PII), and even bitcoins. As...
CYBERSECURITY
The FTCode Ransomware

FTCode is a type of ransomware that spreads itself via spam emails, and is able to execute its PowerShell-based malicious payload in memory only, without downloading any files to disk....
CRYPTOGRAPHY
Leon Battista Alberti’s cipher disk

Leon Battista Alberti’s cipher disk, described in “De cifris” around 1467, is the first polyalphabetic encryption system. The device consists of two concentric discs, rotating relative to each other, containing...
CRYPTOGRAPHY, QUANTUM
Post-Quantum Cryptography (PQC): a classical solution to the quantum threat

Introduction Public key (or asymmetric) cryptography is one of the bases on which all communication protocols rest which, starting from an insecure channel, must achieve multiple security properties, such as...
CYBERSECURITY
The Emotet Trojan

The Emotet Trojan is one of the most dangerous malware in cybersecurity history. Individuals, companies, or even global authorities, anyone could be potential victims. Emotet tricks basic antiviruses into hiding...
CYBERSECURITY
The Ryuk Ransomware

Ryuk is a ransomware family that first appeared in mid to late 2018. In December 2018, the New York Times reported that Tribune Publishing had been infected with Ryuk, forcing...
CYBERSECURITY
The Turla malware

Turla is one of the most advanced APTs (Advanced Persistent Threat) in the world. Also, Turla Group is a well-established collective that has been operational since at least 2004 Also...
CYBERSECURITY
The Advanced Persistent Threats (APT)

“APT”, the acronym for Advanced Persistent Threat, indicates a type of targeted and persistent attacks carried out by opponents with considerable technical expertise and great resources. As the “Advanced” part...
CYBERSECURITY
The Locky ransomware

Locky is a type of malware that can encrypt critical files on your computer and hold them hostage while demanding a ransom payment. The cybercriminals promise to give users a...
LEGAL
The union between art and cryptography: crypto art and NFT

Introduction Crypto art uses the techniques offered by digitization, and in particular the request, to allow artists to give voice to their creativity and make the works subject to exchange...
CYBERSECURITY
The Evil Twin attack

An Evil Twin attack is a spoofing cyberattack that works by tricking users into connecting to a fake Wi-Fi access point that mimics a legitimate network. Once a user is...
CRYPTOGRAPHY, QUANTUM
The logical qubit and the correction of quantum errors

Introduction: Physical Qubit vs Logical Qubit As discussed in the previous article, the unit of information processed by a quantum computer is generically called Qubit or Quantum Bit. However, for...
CYBERSECURITY
WannaCry ransomware

WannaCry ransomware is a cryptomalware worm that attacks Windows PCs.  It’s a form of malware that can spread from PC to PC across networks (hence the “worm” component) and then...
CYBERSECURITY
What is the Cyber Threat Intelligence?

In the nowadays cybersecurity paradigm, Cyber Threat Intelligence plays a leading role. Reactive malware detection tools, firewalls, and analysis through artificial intelligence are not enough: to ensure the security of...
LEGAL
Corporate Law and new technologies

Corporate Law and new technologies: the “remote” Shareholders’ Meeting and cybersecurity issues The reality that, now (unfortunately) for over two years, we have been living with the sadly known health...
CRYPTOGRAPHY
Al-Kindi, the father of cryptanalysis

Abu Yūsuf Yaʻqūb ibn ʼIsḥāq aṣ-Ṣabbāḥ al-Kindi was born in 801 in Kufa or Basra, Iraq, and died in Baghdad in 873. He is known as “the philosopher of the...
CRYPTOGRAPHY, QUANTUM
Shor’s Quantum Algorithm

Introduction Among the numerous applications of the quantum computing model, the most relevant in the cryptographic field is represented by the work of the American computer scientist Peter W. Shor....
CYBERSECURITY
Rootkit viruses

Rootkits have coexisted with the computer world for over 20 years, allowing hackers to access (almost) any computer.   What are Rootkits? First of all, Rootkits are malware, malicious software...
CYBERSECURITY
FlawedGrace RAT

FlawedGrace is the name of a Remote Access Threat (RAT) that is part of the menacing arsenal of the financially motivated cyber criminals gang known as TA505 (or Hive0065). The...
CYBERSECURITY
The banking Trojans

The term banking Trojan indicates a category of malware that aims to steal the banking credentials of victims and carry out online fraud, usually causing significant economic damage.   Dridex:...
CYBERSECURITY
NetWalker ransomware

Netwalker is a type of ransomware that targets Windows-based systems. First discovered in August 2019, it has evolved throughout the rest of 2019 and into 2020. The FBI noted significant spikes in...
CYBER THREAT INTELLIGENCE
Legitimate Sites used as Cobalt Strike C2s against Indian Government

Introduction Telsy Threat Intelligence team observed an attack against members of the Indian government or local institutions, which uses social engineering themes as an investigation for a cyber attack or...
CYBERSECURITY
SharkBot: the stealing banking and cryptocurrency accounts trojan

Some cybersecurity researchers from Cleafy took the wraps off a new Android trojan that takes advantage of accessibility features on mobile devices to siphon credentials from banking and cryptocurrency services...
LEGAL
Green tech and green computing

Abstract Recently, the constitutional protection of the environment has been strengthened by the bill aimed at reforming articles 9 and 41 of our Constitution on environmental protection to protect biodiversity,...
CYBERSECURITY
SimJacker, the SIM cards vulnerability

SimJacker is a SIM card vulnerability that allows cybercriminals to compromise any cell phone and spy on victims by simply sending an SMS text message.   What is SimJacker? The...
CYBER THREAT INTELLIGENCE
BabaDeda and LorecCPL downloaders used to run Outsteel against Ukraine

Telsy CTI Team found and followed insights from the Ukraine question, new IoCs, and the evolution of the tools employed in the attacks.   Beginning in January 2022, there was...
CYBERSECURITY
The Web Shell

A Web Shell is a shell-like interface that enables a web server to be remotely accessed, often for the purposes of cyberattacks.   What is a Web Shell? A Web...
CRYPTOGRAPHY
The Caesar cipher

In cryptography, the Caesar cipher is one of the oldest cryptographic algorithms of which there is a historical trace. It is a mono-alphabetic substitution cipher, in which each letter of...
CRYPTOGRAPHY, QUANTUM
Grover’s Quantum Algorithm

Introduction With the 1996 article “A fast quantum mechanical algorithm for database search,” Indian-American computer scientist Lov K. Grover helped highlight the non-negligible impact of quantum computing on cryptography in...
CYBERSECURITY
CronRAT, the e-commerce malware

Experts have identified a new Linux RAT that was dubbed “CronRAT”. It stands out through its hiding place, as it can be found in different tasks which have a schedule-timeline...
LEGAL
The “cybersecurity law”

Cybersecurity law: a new branch of law to support digital security The constant and dialectical relationship between society and law makes the latter available to the former to acknowledge their...
CYBERSECURITY
Tardigrade, the shape-shifting virus

An APT attacked two different vaccine manufacturers in past years, using shape-shifting malware that initially appears to be a ransomware attack but later turns out to be much more sophisticated....
CYBERSECURITY
The Phishing as a Service (PHaaS)

Phishing is a common way for cybercriminals to dupe people through socially-engineered emails into giving up their credentials to online accounts that can store sensitive data.  Phishers use these emails—which...
CYBERSECURITY
The BlackMatter ransomware

First seen in July 2021, BlackMatter is a Ransomware-as-a-Service (RaaS) tool that allows the ransomware‘s developers to profit from cybercriminal affiliates (i.e., BlackMatter actors) who deploy it against victims.  BlackMatter...
CYBER THREAT INTELLIGENCE
SideCopy APT: from Windows to *nix

Telsy Threat Intelligence team has observed a spear-phishing campaign conducted by cyber-espionage group SideCopy against critical government entities in India.    SideCopy APT: from Windows to *nix As previously published...
CRYPTOGRAPHY
The cipher of Aeneas

In the sacred texts, in particular in the Old Testament, three main secret writings can be found: the Atbash, the Albam and the Atbah. The first cipher code, Atbash, was...
LEGAL
Artificial intelligence and Cybersecurity between cyber defense and cyber attack

Abstract Artificial intelligence can be qualified as an ambivalent tool since it lends itself to being used both as a means to create cyber defense products and, unfortunately, as a...
CRYPTOGRAPHY, QUANTUM
The Qubit: introduction to quantum algorithms

Introduction Sometimes, in popular settings, the quantum computer is labeled as a particular “incredibly faster” computer. Although this consideration is not entirely far from reality, it is necessary to make...
CYBER THREAT INTELLIGENCE
Phishing Campaign targeting citizens abroad using COVID-19 theme lures

Telsy Threat Intelligence team has identified a phishing campaign that appears to be targeting citizens abroad by exploiting the COVID-19 theme associated with a potential embassy lockdown status.   Introduction...
LEGAL
Digital divide: analysis of the phenomenon

Abstract Having learned the usefulness and importance of digital transformation, which has changed the conduct of daily activities for individual users and the management methods of companies, it is appropriate...
CYBERSECURITY
Double and triple extortion attacks

Initially, criminals exclusively used ransomware-related malware to restrict access to user data by encrypting files on individual or organizational devices.  In exchange for the decryption key, the victims had to...
CYBER THREAT INTELLIGENCE
NOBELIUM again or eCrime operation?

Telsy Threat Intelligence team identified a phishing campaign that seems to target multiple victims based in the United States, Great Britain, and Europe. The campaign appears to have been active since...
CYBERSECURITY
The Dharma ransomware

Dharma is a dangerous ransomware, identified as early as 2016, whose uniqueness lies entirely in its peculiar attack technique: the Dharma ransomware, in fact, is able to install itself on...
LEGAL
The integration of cybersecurity and sustainability in the 2030 Agenda for sustainable development

Abstract From the analysis of the 2030 Agenda for sustainable development and the 17 Goals set out therein, it can be deduced that digital security and sustainability today mix, allowing...
CRYPTOGRAPHY
History of cryptography: the scitala

The scitala or scital (in ancient Greek: σκυτάλη, skytàlē, “stick”) is traditionally considered an encrypted and secret message that was sent by the ephors, the five supreme magistrates of Sparta,...
CRYPTOGRAPHY, QUANTUM
The Quantum Computing

Introduction At the end of the last century, the field of experimental physics was revolutionized by the technological development of classical computers. Among the numerous innovations, the possibility of computer...
CYBER THREAT INTELLIGENCE
Possible attack to Telco company in Middle East

Telsy Threat Intelligence team identified a possible Grunt Covenant multi-stage attack aimed at a major telecommunications company in Iran.   Introduction In this article, we will look at the different steps...
CYBERSECURITY
The REvil ransomware

REvil (Ransomware Evil, also known as Sodinokibi) is a Russian-speaking private Ransomware-as-a-Service (RaaS) operation. After an attack, REvil would threaten to publish the information on their page (Happy Blog) unless...
CYBERSECURITY
The DarkSide Ransomware

DarkSide is a ransomware strain that threat actors have been using to target multiple large, high-revenue organizations resulting in the encryption and theft of sensitive data and threats to make...
LEGAL
Blockchain and Cybersecurity: a legal perspective

Abstract Over the years, media around the world have constantly reported (and continue to report with assiduous frequency) news relating to cryptocurrency theft and computer scams also linked, among other...
CYBERSECURITY
The dissemination of LockBit 2.0

LockBit is a relatively new ransomware that has become very popular and known fast. The ecosystem behind this threat has significantly increased its criminal activities since Q4 of 2020 and...
CYBER THREAT INTELLIGENCE
Dissecting new AppleSeed backdoor of Kimsuky threat actor

Telsy analyzed the cyber espionage group known as Kimsuky in a particular spear phishing campaign.   Introduction The Telsy Threat Intelligence team trackings various threat actors, among them the cyber espionage...
CYBERSECURITY
The Ransomware as a Service (RaaS)

Ransomware is evolving from a linear attack model to an insidious Ransomware as a Service (RaaS) model: attackers are increasingly focusing on program development, while letting third parties identify victims...
CYBERSECURITY
The social engineering

Social engineering is a technique for obtaining information widely used by experienced hackers and spies and, since it involves (especially in the last phase of the attack) a more direct...
CYBERSECURITY, CYBER THREAT INTELLIGENCE
New malicious campaign spreading Windows and Linux backdoors

Telsy analyzed a new malicious campaign spreading Linux and Windows backdoors.   Introduction This type of campaign starts by exploiting known vulnerabilities related to the target technologies and then performs...
CYBERSECURITY, CYBER THREAT INTELLIGENCE
Lazarus Group continues AppleJeus Operation

Telsy analyzed new samples related to the threat actor Lazarus Group and in particular to the “AppleJeus Operation”.   Introduction While some of the details have changed, the methods used...
LEGAL, CYBERSECURITY
Cybersecurity and prevention of computer crimes pursuant to Legislative Decree 231/2001

Curated by Alessandro Livi and Erica Onorati, Team Legal Telsy   Abstract Cybersecurity issues cannot (and must not) be considered isolated issues but they necessarily see the mixing and involvement...
LEGAL, CYBERSECURITY
The era (also normative) of Cybersecurity

Curated by Alessandro Livi and Erica Onorati, Team Legal Telsy   Abstract On January 23, 2020, the hand of the Doomsday Clock arrived just one hundred seconds from the symbolic...
LEGAL, CYBERSECURITY
REGULATORY PRODUCTION CONTINUES INCESSANTLY: the latest news of cybersecurity protagonists

Curated by Alessandro Livi and Erica Onorati, Team Legal Telsy   Abstract The regulatory and institutional framework within which the leading bodies of the cyber sector operate, with their respective...
CYBERSECURITY
The HEH virus

A virus has been circulating since last year: it’s called HEH and it can infect practically everything: from routers to IoT devices. This new threat that is spreading on the...
LEGAL, CYBERSECURITY
CSIRT: the new institutional actor of cybersecurity

Curated by Alessandro Livi and Erica Onorati, Team Legal Telsy   The CSIRT: the new institutional actor of cybersecurity In recent years, in tandem with the evolution and progress of...
LEGAL, CYBERSECURITY
Cybersecurity and Data Protection: the boundaries and contact points between the two sectors

Curated by Alessandro Livi and Erica Onorati, Team Legal Telsy   Abstract Data protection is one of the most complex and debated issues of recent years, characterized by an application...
CYBERSECURITY, CYBER THREAT INTELLIGENCE, NEWS
Google Drive abused in document exfiltration operation against Afghanistan

Telsy analyzed a new campaign that targeted Afghanistan and aimed to steal documents.   Introduction Telsy last June analyzed a new campaign that targeted Afghanistan, specifically researchers and government employees....
CYBERSECURITY
The Glowworm attack

Glowworm is a novel technique that leverages optical emanations from a device’s power indicator LED to recover sounds from connected peripherals, and spy on electronic conversations from a distance of...
CYBERSECURITY
The Botnets

Botnets have become one of the major threats to today’s security systems. Cybercriminals increasingly use them because they allow them to infiltrate almost any device connected to the Internet, from...
CYBERSECURITY, CYBER THREAT INTELLIGENCE, NEWS
REMCOS and Agent Tesla loaded into memory with Rezer0 loader

An Italian government email has been targeted by a phishing campaign. The attack’s goal aimed to install some remote control and information-stealing tool.   What’s happened During the last month,...
CYBERSECURITY
DDoS attacks 

DDoS attacks are a cyber threat as simple to put into practice as it is effective: capable of sending a company or critical infrastructures such as hospitals and airports into...
CYBERSECURITY
The Lamphone Attack

Today it’s possible to spy on secret conversations happening in a room from a remote location just by observing a light bulb hanging in there – visible from a window...
CYBERSECURITY, NEWS, EVENTS
MARITIME CYBERSECURITY: SEAFUTURE 2021

In the last two decades, the cases of cyberattacks against Institutions have increased exponentially, so much so that they pose a real threat to the defense of the state and...
CYBERSECURITY
Malware-as-a-Service (MaaS): what it is and why it is (very) dangerous

Malware-as-a-Service (MaaS) refers to the illegal lease of software and hardware for carrying out cyber-attacks. Owners of MaaS servers offer to threat actors a paid botnet service that distributes malwares....
CRYPTOGRAPHY, QUANTUM, NEWS
Telsy has recently entered into Quantum Telecommunications Italy

Telsy has recently completed its entry into Quantum Telecommunications Italy (QTI) with a minority stake in the share capital of this startup active in the field of quantum fiber optic...
CYBERSECURITY
Tokyo 2020 Olympic Games & cyber threats

The organizing committee of the Tokyo2020 Olympics has decided to use the expertise of about 200 ethical hackers to protect their infrastructures from possible cyberattacks. Organizers fear that history may...
CYBERSECURITY
Port scanning: a double-hedge sword?

Port scanning refers to the activity of determining which port within a network can receive and send data, by sending packets to specific ports and analyzing responses to detect flows...
CRYPTOGRAPHY
Homomorphic Encryption: (im)practical innovation?

Homomorphic encryption (HE) is an innovative type of cryptography that allows the performance of computations on encrypted data, obtaining results consistent with those that would be obtained by performing the...
CYBERSECURITY, CYBER THREAT INTELLIGENCE
Cyber threats & economic intelligence: the deadly mix to national security

The ongoing exploit of emerging technologies to carry out cyberattacks is not just a matter concerning gangs of hackers and threat actors asking for ransoms, but also affects national security....
CRYPTOGRAPHY
E2EE: features of an “invincible” system

End-to-End encryption (E2EE) is an application of asymmetric encryption systems. This means that in a communication, only the recipient and the sender, its two ends, can decrypt and read the...
CYBERSECURITY
Machine Learning: why is vital for cybersecurity

Machine learning is becoming more vital than ever in today’s – and tomorrow’s -cybersecurity. Being a subset of AI, machine learning consists of the techniques that enable computers to figure...
CYBERSECURITY
Firmware security: why it matters

While securing other critical components of their infrastructure such as hardware and software, businesses often neglect firmware security. Being the basic core of all its hardware stuff, an organization is...
CRYPTOGRAPHY
RSA Cryptography: history and uses

The RSA encryption is a public-key-based cryptosystem, named after Ron Rivest, Adi Shamir and Len Adleman who invented it in 1977. Clifford Cock had previously invented an equivalent system for...
CYBERSECURITY
FragAttacks: new Wi-Fi vulnerabilities found!

A few days ago, a Belgian security researcher,  Mathy Vanhoef, has found and named as “FragAttacks (fragmentation and aggregation attacks)”, a dozen of unknown security flows affecting Wi-Fi devices. Within the radio...
CYBERSECURITY
Vulnerability Assessment: an overview of a crucial cybersecurity task

Vulnerability assessment is a task in delivering an effective cybersecurity strategy in both corporate and public sectors. It is vital to bring about risk awareness, and it is the very...
CYBERSECURITY
Cybersecurity analysts: what they do and why their work is vital

Cybersecurity analysts are the core of an organization’s security, private and public alike. They have a vital task: ensuring that their IT assets are secure and protect them from violations...
CYBERSECURITY
Penetration testing: what it is and why it is important

Penetration Testing (Pen Test) refers to the activity of systematically attempting to violate a vulnerable component of a system to discover the security breaches in it through a simulated attack....
CRYPTOGRAPHY
AES-256 encryption: how does it protect our most sensitive data?

You have certainly heard of AES-256. Commonly referred to as “military-graded” cipher, the Advanced Encryption Standard (AES) is essential in government cybersecurity, encryption, and electronic data protection. Its story started...
CYBERSECURITY
Cloud: what is it and its key advantages

Cloud is a metaphor indicating a computing model where an internet connection enables a network of servers, applications, storage, and other development tools. Companies around the world use it to...
CRYPTOGRAPHY
Cryptography: what is it and its uses

Cryptography, or crypto, refers to the technique of securing information and communications through codes. By doing so, only those people you send information holding the decoding key to can understand...
CYBERSECURITY
Cybersecurity career: 4 reasons to consider it

Pursuing a career in cybersecurity can be tempting. Figures show that this industry tends to have a zero unemployment rate. Nowadays, the labor market requires cybersecurity skills more than ever....
CYBERSECURITY
Cyberattacks: a matter of war or disruption?

Cyberattacks are a threat to national security. However, describing them as war is highly problematic. Critics of this stance often argue that armed conflict has been becoming virtual. They say...
CYBERSECURITY
Smart working: how to mitigate cyber risks

Smart working is a fertile ground for cyber threats and criminals. As steps to counter the coronavirus outbreak take effect, millions of workers worldwide have been sent home with their...
CYBER THREAT INTELLIGENCE
Erecting an IT fortress: strategies for resilience

Erecting an IT fortress is an urgent need these days. Facing the surge in cyber-attacks of these times, companies will need to adopt new strategies, procedures, and technologies to become...
CYBERSECURITY
Cybercrime: how can we all deal with it?

One of the biggest cybersecurity dilemmas is the following: “Can we avoid cybercrime?” After all, online identity theft and fraud, hackers, ransomware cyber-attacks, phishing, and other scams are threats to...
CYBERSECURITY
VPN: a must-have tool for privacy and security

VPN (Virtual Private Network) service gives you online privacy, anonymity, and security by creating a private network from a public internet connection. By using it, businesses can securely connect users...
CYBERSECURITY
SOC: what it is and how it operates

SOC or Security Operations Center – not to be confused with SoC (“System on a Chip) – is the core component of a serious business security strategy. Simply put, a...
CRYPTOGRAPHY
Alan Turing: the life of the father of computing

Alan Turing is by consensus the father of modern computing. Are you using a laptop, a computer, a smartphone, or even set a network of IoT devices? Then you are...
NEWS
Bitcoin mining: What it is and how it works

What does Bitcoin Mining mean? Bitcoin mining is creating, or rather discovering, bitcoin currency. Unlike real-world money printed when more is needed, bitcoin cannot simply be willed into existence but...
CYBERSECURITY
Anonymous: what to know about a worldwide hacking group

Anonymous is the most famous hacktivist group in the world. It gained international attention when it attacked the Church of Scientology’s website in 2008. As an informal group without a...
NEWS
Adriano Olivetti: Life of an innovator

A shroud and halo of myth surround the figure of Adriano Olivetti. He was one of the most prominent figures in the Italian cultural and industrial panorama, reserved for the...
CRYPTOGRAPHY, EVENTS
CrypTO: Telsy’s contribution in the organization of the CrypTO national web conference of Turin’s Polytechnic

The Polytechnic of Turin has organized with the collaboration of Telsy, the CrypTO national web conference. It will take place on the 27th and 28th of May 2021. The organizers are Danilo...
CYBERSECURITY, CYBER THREAT INTELLIGENCE
Maze: a short story of one of the most dangerous cyberthreats

The Maze group has been one of the subtlest hacking groups in recent history. The maze was a hacking group targeting organizations worldwide across many industries. It has recently announced...
CRYPTOGRAPHY, NEWS
Agnes Meyer Driscoll: women in cryptanalysis

Agnes Meyer Driscoll was a leading cryptanalyst working for American defense agencies between WW1 and the Cold War’s early years. She started her career in the US Navy by enlisting...
CRYPTOGRAPHY
Enigma: a story about cipher mishandling

Enigma was a portable cipher machine producing a polyalphabetic substitution cipher. It had up to 5 rotor scramblers. Many versions included many sets of plugboard connections, which allowed a further swap of a...
CYBERSECURITY
Phishing: how to detect one of the subtlest online threats

Phishing is one of the subtlest threats in the dark world of cyber threats. The world has been witnessing a surge in phishing attacks since the pandemic outbreak. It may...
CYBERSECURITY
Olicyber: the future of Italian cybersecurity is here!

Will the curriculum of Italian pupils soon include hacking? There is a chance. Italy is organizing its first CyberOlimpics, Olicyber, organized by CINI and TeamItaly, the Italian white hackers’ team....
NEWS
Cablocracy: the history of (and the struggle for) undersea comms

Did you know nations struggle for cablocracy, that is, the control for strategic comms? In the age of wireless and mobile, few people know that a long net of submarine...
CYBERSECURITY
Cyberwarfare and national economies

Cyberwarfare is not just a standard threat in the dark woods of cyber threats. It is much more serious than that. It is no secret that big and key strategic...
CYBERSECURITY, CYBER THREAT INTELLIGENCE, NEWS
Kevin Mitnick: the computer-break-in artist

Kevin Mitnick was the most elusive computer break-in artist in history. Security experts often refer to him as “The World’s Most Wanted Hacker.” Indeed, the US Feds took almost three...
CYBERSECURITY, CYBER THREAT INTELLIGENCE
Turin Polytechnic under attack: what you should know

A hacker attack has temporarily disabled Turin Polytechnic’s online services servers for a few hours. What did happen? Was it a severe violation? Let’s find it out together! What did...
CYBERSECURITY
The Emotet threat

Law enforcement agencies from the several EU countries and the UK have dismantled the notorious malware Emotet. The takedown of this malicious botnet happened on Tuesday, 26th January. Emotet is...
CYBERSECURITY
Sunburst: the attack that shook the world

Cyber analysts recently discovered the “Sunburst” attack malware, which triggered a series of cyber-espionage attacks that began in the spring of 2020. The attack involved thousands of public administrations, private...
CYBERSECURITY
Take a hacker seriously: the story of Raphael Grey

You will take a hacker seriously after reading the story of Raphael Grey. Raphael Grey managed to hack several e-commerce sites, accessing the customers’ credit card data for a month...
CYBERSECURITY
Fake vaccines online: beware of scams

The NAS Carabinieri blocked two sites advertising and offering fake vaccines for COVID-19 and flu. In the latter case, subject to the obligation of medical prescription and sold only in...
CYBERSECURITY
AiR-ViBeR: the hack that exploits PC fans

Cyber ​​risks, as we know, have always been around the corner. They are insidious and can even silently affect the data of companies and individuals quite easily, if not adequately...
CYBERSECURITY
SolarWinds Attack: Italy activates the Cyber ​​Security Nucleus

Following a tampering with a number of SolarWinds Orion platform updates in March, hackers have infiltrated the networks and computer systems of government and private entities around the world by...
CYBERSECURITY
COVID-19 vaccine: beware of phishing

Have you received a strange e-mail about COVID-19, offering you various solutions to buy an under-the-counter vaccine currently in distribution? Think twice before clicking on any link. In addition to...
CYBERSECURITY
Spyware – an almost invisible threat

Is your PC or mobile phone not as fast as it used to be? Has your battery started lasting less and less, despite its limited state of deterioration? Have you...
CYBERSECURITY
The guy who hacked Twitter: “Kirk” and the human factor

It was a 17-year-old hacker who managed to persuade some Twitter employees that he was a collaborator of the technology department who needed the credentials to log into the customer...
CRYPTOGRAPHY
Olivetti P101: an Italian success

The Olivetti “Program 101” computer (P101), presented in 1965, is considered by some to be the first “personal computer” in history, as it had all the main features of large...
CRYPTOGRAPHY
How was the Internet born? the World Wide Web Revolution

By the end of the 1980s, ARPANET had expanded its nodes overseas and, through the TCP / IP protocols, had led to the creation of a vast “network of networks”...
CYBERSECURITY
Business data loss: a nightmare for companies

Business data loss can be detrimental for businesses. Organizations – from small to medium-large – depend on technology when it comes to managing business operations and data storage. Unfortunately, technology...
CYBERSECURITY
Is SOCaaS useful for companies? Google Chronicle as an effective and advantageous SOCaaS service

Today, we present a paper that explains the convenience of adopting a SOCaaS service for businesses and organizations. The correct management of IT infrastructures is essential to guarantee any organization’s...
CYBER THREAT INTELLIGENCE
When a false flag doesn’t work: Exploring the digital-crime underground at campaign preparation stage

At the beginning of October 2020 we found copy of a malicious document potentially to be attributed to an APT group known with the name of APT34 / OilRig. The...
CYBERSECURITY
Cyber threats linked to COVID

Has the Coronavirus had negative effects on the state of global cybersecurity? Unfortunately, yes. In the past few hours, there has been a series of cyber-attacks against the Italian pharmaceutical...
CYBERSECURITY
How the Italian Army defends itself from cyber threats: the RSC

The Italian Army has recently made the Cyber Security Department (RSC) operational, after establishing it around two years ago. As threats to cyber space increase exponentially, it is absolutely vital...
CYBERSECURITY
Augmented and Virtual Reality: what are the privacy risks?

Last month, Nintendo released a new video game in the popular Super Mario Kart saga. The game is part of a new category of Toys-to-life, a video game genre that...
CYBERSECURITY
The double extortion technique: the Campari case

In recent weeks the Campari group has suffered a serious ransomware attack of the so-called “double extortion” technique. The damage would amount to two terabytes of stolen data, with attached...
CYBERSECURITY
Cybersecurity and the implementation of smart working

Faced with the unexpected health crisis, institutions and companies around the world are trying to facilitate the implementation of smart working through the dispersion of adequate rules and procedures. The...
CYBER THREAT INTELLIGENCE
QNodeService stepped up its features while operated in widespread credential-theft campaigns

Since mid-year 2020, a new piece of malware emerged in the cyber threat landscape. It seems to be linked to the crimeware matrix due its main purpose and use, which...
CYBER THREAT INTELLIGENCE
Trying not to walk in the dark woods. A way out of the Maze

After numerous ransomware attacks since its appearance in May 2019, the popular Maze Team recently claimed the end of its criminal activity through a press release on its Dedicated Leak...
NEWS
Enisa report 2020: the pandemic’s effect on cybersecurity

Enisa (the European Union Agency for Cybersecurity) has recently published the eighth edition of its Threat Landscape Report (ETL) on cyber threats registered in the period between January 2019 and...
CYBER THREAT INTELLIGENCE
Operation “Space Race”: reaching the stars through professional Social Networks

At the beginning of May 2020, Telsy analyzed some social-engineering based attacks against individuals operating in the aerospace and avionics sector performed through the popular professional social network LinkedIn. According...
CYBERSECURITY
Cybersecurity’s weakest link: the human factor

The latest studies are further confirming a fact that, although already known, is still too often ignored: the human factor is the greatest source of risk for companies’ IT security....
CYBERSECURITY
Cloud, Edge Computing and the future of cybersecurity

Cloud Computing is today a fully consolidated and still expanding reality, but the exponential development of IoT and 5G technology is increasingly attracting attention to Edge computing, a new distributed...
CYBERSECURITY
Twitter attack: the three lessons to learn

The recent cyber-attack that hit Twitter has created a lot of media sensation, especially because it is the first time that one of the great global social media platforms has...
CYBER THREAT INTELLIGENCE
Turla / Venomous Bear updates its arsenal: “NewPass” appears on the APT threat scene

  Recently Telsy observed some artifacts related to an attack that occurred in June 2020 that is most likely linked to the popular Russian Advanced Persistent Threat (APT) known as...
CYBERSECURITY
Ransomware: a threat to the present and the future

Ransomware has become an increasingly prominent threat to cyberspace security globally and the recent statistical data collected would seem to confirm this trend also for the years to come.  ...
CYBERSECURITY
Cyber war: the current scenario

The modern hybrid war Lately we hear more and more often about “hybrid” or “asymmetric” war, terms intended to explain a military strategy that mixes conventional war, irregular war and...
CRYPTOGRAPHY
Steganography: from its origins to the present

The term steganography refers to a technique that aims to hide communication between two interlocutors. The term is composed precisely of the Greek words στεγανός (covered) and γραφία (writing). Unlike...
CRYPTOGRAPHY, QUANTUM
War and cryptography: the challenge of quantum communication

Message encryption has always been a very important tool within the military, stretching back to the time of the ancient Greeks to the present day. It is natural for two...
CYBERSECURITY
How Artificial Intelligence and Machine Learning will change the world of cybersecurity

Artificial Intelligence (AI) and Machine Learning (ML) tools could substantially help in the fight against cybercrime. But even these technologies can’t guarantee absolute security, and they could even be exploited...
CYBERSECURITY
Simjacker and other cyber threats for mobile devices in 2020

At the end of last year, a security company discovered a serious threat to the world of cell phones and beyond: Simjacker, an attack technique that allows, in fact, to...
CYBERSECURITY
The revolutionary methods to attack air-gapped devices

In the last few years, the Cyber-Security Research Center of Israel’s Ben Gurion University of the Negev coordinated by Dr. Mordechai Guri, has developed and tested several new types of...
NEWS
Telsy’s report on UniCredit’s data breach went viral worldwide

On the evening of April 19, Telsy denounced that the personal data of about 3000 employees of the UniCredit S.p.A. bank, one of the largest banks in Italy, had been...
CYBER THREAT INTELLIGENCE
Unicredit employees database for sale on cyber-crime forums

On the late afternoon of 19/04/2020, a threat actor posted a new sale on a hacking and cyber-crime forum selling the database of UniCredit employees. UniCredit S.p.A. is an Italian...
CYBERSECURITY
Coronavirus: reported a new campaign of spear phishing attacks to steal personal data

A few days ago, on the 27th of March, industry reporting signalled a new campaign of Covid-19/ coronavirus-themed spear phishing attacks that illegitimately uses the WHO (World Health Organization) mark,...
CYBERSECURITY, CYBER THREAT INTELLIGENCE
Cybercriminals trojanized orginal SM Covid-19 awareness Android app to target Italy

In these days of particular sacrifices due to the spread of the COVID-19 pandemic, cyber criminals do not seem to save anyone and on the contrary, taking advantage of the...
CRYPTOGRAPHY, QUANTUM
Quantum challenges to cryptography: why the future is already here

More and more often, we hear rather dramatic and movie-like statements about how the quantum era will change many aspects of our life, among which also cryptography and, therefore, security....
CYBERSECURITY
Telsy Cyber Security Awareness – Stay cyber safe at home

Il responsabile della divisone di Cyber Security e Threat Intelligence di Telsy, Emanuele De Lucia, ha stilato un documento rivolto all’utenza comune utile ad accrescere la consapevolezza dei rischi del...
CYBERSECURITY
Strengthen Android privacy and security via Telsy free secure DNS over TLS

Starting from Android 9 Pie (https://www.android.com/versions/pie-9-0/ ), Google has released some interesting features related to the tuning of its mobile operating system and in particular the possibility of modifying some...
CYBER THREAT INTELLIGENCE
APT34 (aka OilRig, aka Helix Kitten) attacks Lebanon government entities with MailDropper implants

Very recently another custom malicious implant that seems to be related to APT34 (aka OilRig) has been uploaded to a major malware analysis platform. Since 2014, year in which FireEye...
CRYPTOGRAPHY
ON THE CONDITION NUMBER OF THE VANDERMONDE MATRIX OF THE nTH CYCLOTOMIC POLYNOMIAL

Edoardo Signorini is an undergraduate student who is currently working on various projects in Telsy, while writing his thesis about the “Post Quantum Cryptography”. Furthermore, he also published his work...
EVENTS
Webinar: ”Iranian Cyber Capabilities”

On March 6th at 11 am our Head of CTI Division, Emanuele de Lucia, and our CTI Analyst, Marco di Costanzo, will hold a webinar entitled ”Iranian Cyber Capabilities”.This webinar...
EVENTS
Telsy has been involved in the organization of the seminar: “BITCOIN, LA MONETA SENZA AUTORITÀ”.

The event will take place on 28 of February, at Turin University, in “Aula Buzano”. Following a short abstract: “Bitcoin is a digital currency that operates without any central authority. The...
CYBERSECURITY
A Password is not a Pass-Word

From bank accounts to entertainment, our virtual life is wider than ever, and with the 4th industrial revolution is only meant to grow at an exponential rate. Within this redefined...
CYBER THREAT INTELLIGENCE
Meeting POWERBAND: The APT33 .Net POWERTON variant

Introduction Since the Islamic revolution, US and regional rivals have put continuos effort in containing and isolating Iran. Implementing a foreign policy generally addressed as “strategic loneliness”, Iran’s defense strategy...
CYBERSECURITY
How well does my car know me?

It is certain that our cell phones and electronic devices collect a wide variety of data about us. On top of the new technologies to which we expose our home...
CYBERSECURITY
Tamper detection technologies: it takes a thief to catch a thief

Tamper detection is a concept already present in our everyday life, even when we are not aware that it can be called by that name, or even that it is...
CYBERSECURITY
Think differently, secure differently

In the new evolving communication landscape, cyber threats do not just target things, objects, or devices. First and foremost, cyberattacks target people and leverage on user’s and programmer’s psychology. On...
CYBERSECURITY
New threats, new solutions: fighting insecurity with Machine Learning

The landscape of possible cyberthreats is rapidly changing, exploiting vulnerabilities in new technologies, systematically jeopardizing wide and multifaceted systems, and threatening the security of an ever increasing amount of information....
NEWS
NOKIA IMPACT WEB PLATFORM – Responsible Vulnerabilities Disclosure

During some activities of the Telsy research team within a client company, some vulnerabilities emerged in the product NOKIA IMPACT WEB PLATFORM. These vulnerabilities are currently identified according to the...
CYBERSECURITY
Foreseeing what is next: the rise of 5G technologies

At the end of the 17th century, the French artist Jean-Marc Côté was commissioned some illustrations about en l’an 2000. Already back then, life in the 2000 was pictured as...
CYBER THREAT INTELLIGENCE
The Lazarus’ gaze to the world: What is behind the second stone ?

Introduction In a recent blog post (link here) we analysed the first part of an operation likely conducted by APT38/Lazarus, which targeted various organizations, including financial and banking ones. We...
EVENTS
Telsy has been involved in the organization of the event ‘’DE CIFRIS AUGUSTAE TAURINORUM’’, that outlines an overview on cryptanalysis of ARX ciphers.

The event will take place on 22 on November, at Turin University (Aula 2), in ‘’Via Carlo Alberto 10’’. Following, a short abstract:   ‘’ We present some features of...
CYBERSECURITY
Make the Internet a Secure++ Word – The Internet Service Provider Role

“The current world of telematic communications appears as fast-changing environment. The actors of this ecosystems are represented by billions of nodes that, every day, globally transmit a huge amount of...
CYBER THREAT INTELLIGENCE
The Lazarus’ gaze to the world: What is behind the first stone ?

Introduction Lazarus (aka APT38 / Hidden Cobra / Stardust Chollima) is one of the more prolific threat actors in the APT panorama. Since 2009, the group leveraged its capability in...
CYBERSECURITY
The deadly link between zero-day exploit and DDOS botnet attacks

The growing demand for connectivity and faster data transfer, along with new technology trends such as the Internet of Things (IoT) and the Artificial Intelligence (AI), combined withthe progressive implementation...
EVENTS
Our Embedded Engineer Andrea Molino was one of the speakers at the National Cryptography Association ”De componentis cifris ”

On 14 October 2019, a member of our team, Eng. Andrea Molino, gave a speech at the event ”La De Cifris incontra Torino” , organized by De Componendis Cifris and...
CYBERSECURITY
Hacking the Artificial Intelligence

The enemies of the future will not necessarily need bombs, missiles or atomic weapons to instil terror in civilian populations. They will need only some tape, scissors and good practical...
CYBERSECURITY
Cybersecurity & Cyberattacks, a Hand In Hand Development Through The Years

The birth of the internet and the digital era brought to the light the theme of “cybersecurity”, that over the past years gained more and more importance. Security, indeed, has...
CYBER THREAT INTELLIGENCE
DeadlyKiss: Hit one to rule them all. Telsy discovered a probable still unknown and untreated APT malware aimed at compromising Internet Service Providers

In the first days of September 2019, Telsy Cyber Threat Intelligence Unit received a variant of a strange and initially mysterious malware from a stream of thousands of samples coming...
CYBER THREAT INTELLIGENCE
Zebrocy relies on dropbox and remote template injection to supply its dishes to an institution of Eastern Europe diplomatic sector.

Introduction On the 22nd of August 2019, a new spear-phishing email message has been collected by Telsy CTI Team. This malicious email has been armed with an attached lure document...
CYBER THREAT INTELLIGENCE
PRIMITIVE BEAR USES A NATO-THEMED LURE DOCUMENT TO TARGET UKRAINIAN GOVERNMENT AND DEFENSE AGENCIES

Recently we caught a NATO-themed malicious lure document to be likely associated with a new PRIMITIVE BEAR operation conducted against Ukrainian defense and government agencies. According to its metadata, the...
CYBER THREAT INTELLIGENCE
Unknown threat actor is using Agent Tesla variants against Oil&Gas and Energy Sector

On 02/07/2019, Telsy TRT catched a new malware variant belonging to Agent Tesla family addressed to companies operating in the Energy and Oil&Gas sector. Among these organizations, Telsy identifies a...
CRYPTOGRAPHY, EVENTS
Seminar – “An introduction to secure multi – party computation”

Telsy seminar of Giuseppe D’Alconzo entitled: “An introduction to secure multi – party computation” The seminar, organized with The Polytechnic University of Turin, will be held on Monday 15 July...
CRYPTOGRAPHY, EVENTS
Seminario Prof. Desmedt, 1 luglio 2019

Seminario del Professor Yvo Desmedt dal titolo Private and reliable communication with untrusted components Il seminario, organizzato da Telsy in collaborazione con il Politecnico di Torino, si terrà lunedì 1...
CYBER THREAT INTELLIGENCE, NEWS
Recent “CEO Fraud” campaign is spreading within EU and already made victims. Telsy TRT joined an international collaborative effort for researching and mitigating the threat.

In the first days of May 2019, Telsy TRT joined a collaborative international effort aimed at studying, researching and mitigating a recent malicious campaign carried out by a criminal gang...
CYBER THREAT INTELLIGENCE
APT34: New leaked tool named Jason is available for the mass

In the afternoon of 03/06, Lab Dookhtegan released a new tool they report belonging to the hacking arsenal of the group APT34. This hacking tool seems to be useful in...
CYBER THREAT INTELLIGENCE
Following the Turla’s Skipper over the ocean of cyber operations

In the middle of May 2019 new malware variants identified to be part of Turla suite comes into light. Turla, also known as Snake or Uroburos is one of the...
CYBER THREAT INTELLIGENCE
Telsy TRT releases its YARA rule to detect Turla LightNeuron, the Microsoft Exchange backdoor

A recent APT malware infection, known as LightNeuron, uses the basic functions of Microsoft’s Exchange Server to monitor and control outgoing and incoming communications from mail servers. The threat group...
CYBER THREAT INTELLIGENCE
Unknown threat actor is using a compromised website belonging to a government institution of Middle-East in a campaign referring commercial and financial themes.

Recently, Telsy TRT detected a wave of malicious documents trying to impersonate an official institution of a government of Middle-East. Moreover, the website of another government institution of the same...
NEWS
Playing with PS RogueRobin; The DarkHydrus PowerShell payload

In July 2018, Palo Alto Unit 42 analyzed a targeted attack spreading in the Middle East. In that case, the threat actor used a custom PowerShell based payload that the...
CYBER THREAT INTELLIGENCE
Protected: “AVE_MARIA”; it’s not our Sunday prayer. It’s a cheap, publicly referenced and advertised RAT. OSINT insights by TTRT.

There is no excerpt because this is a protected...
CYBER THREAT INTELLIGENCE
Threat Hunters vs Red Teamers. A meeting in the cyber space…

Recently, a new wave of malicious decoy Microsoft Office documents addressed exclusively to a central country of the european geographical area was intercepted by Telsy TRT. These have been collected...
CYBER THREAT INTELLIGENCE
OceanLotus On ASEAN Affairs

In last days of March, Telsy TRT captured same malicious macro armed documents likely tergeting ASEAN affairs and meeting members. Telemetry and spreading statistics related to these decoy documents highlight...