Cyber Threat Intelligence Archivi

Cyber Threat Intelligence: knowing and anticipating threats

Success in the digital age depends on the ability to validate complex information and leverage it to lead change. For organizations, it is today necessary to equip themselves with tools...

The Triple Cyber Threat: Borat RAT

06 Mar

Recently a US cyber risk intelligence company has discovered a new Remote Access Trojan (RAT) malware. RAT malware typically helps cybercriminals gain complete control of a victim’s system, permitting them...

Security Monitoring: protecting your business from cyber threats

20 Feb

Hackers or malware, careless or disgruntled employees, outdated or vulnerable devices and operating systems, public and mobile cloud computing, or third-party service providers: in the normal course of business, most...

The Cyber Vulnerabilities

16 Jan

The fast evolution of the international scenario puts companies in front of new challenges. These challenges are closely related to security, staff preparation and the constant growth of cyber vulnerabilities....

Microsoft Exchange servers exploited with OWASSRF

29 Dec

Executive Summary In December 2022, Telsy Incident Response Team was called upon to handle a cyber security incident. The analysis conducted detected the execution of PowerShell code by exploiting a...

Microsoft Exchange servers backdoored with OwlProxy

20 Sep

Introduction In early 2022, Telsy observed malicious cyber activity in the Microsoft Exchange infrastructure. The analysis conducted revealed the presence of a malicious DLL, called “fuscom.dll“, and its persistence by...

What is the Cyber Threat Intelligence?

11 Apr

In the nowadays cybersecurity paradigm, Cyber Threat Intelligence plays a leading role. Reactive malware detection tools, firewalls, and analysis through artificial intelligence are not enough: to ensure the security of...

NOBELIUM again or eCrime operation?

07 Dec

Telsy Threat Intelligence team identified a phishing campaign that seems to target multiple victims based in the United States, Great Britain, and Europe. The campaign appears to have been active since...

Possible attack to Telco company in Middle East

24 Nov

Telsy Threat Intelligence team identified a possible Grunt Covenant multi-stage attack aimed at a major telecommunications company in Iran. Introduction In this article, we will look at the different steps...

Dissecting new AppleSeed backdoor of Kimsuky threat actor

03 Nov

Telsy analyzed the cyber espionage group known as Kimsuky in a particular spear phishing campaign. Introduction The Telsy Threat Intelligence team trackings various threat actors, among them the cyber espionage...