Intelligence View
⚡ tsecurity.de Intelligence
6/28/2022
Evilnum Hackers Return in New Operation Targeting Migration Orgs Hackers Deploy Shadowpad Backdoor and Target Industrial Control Systems in Asia Tencent Admits…
Evilnum Hackers Return in New Operation Targeting Migration Orgs Hackers Deploy Shadowpad Backdoor and Target Industrial Control Systems in Asia Tencent Admits to Poisoned QR Code Attack on QQ Chat PlatformKrebs: The Link Between AWM Proxy & the Glupteba Botnet Ransomware Is the Biggest Global Cyber Threat: And the Attacks Are Still EvolvingMeet The Cybersecurity … Continue reading 6/28/2022
Cyber Threat Intelligence & Forensik
Bedrohungsgraph · ATT&CK-Mapping · Exploit-Belege
CTI Threat Relationship Graph
Akteure · Techniken · Beziehungen
CVE / Incident Threat Actor Software MITRE ATT&CK CWE Weakness IoC
MITRE ATT&CK Matrix Navigator
Enterprise-Matrix · nur belegte Techniken
T1486TA0040 · Impact
Data Encrypted for Impact
Mitigation: M1053 Data Backup & Offline Isolation
Quelle: Kontext-Klassifikation des Artikeltextes
T1071TA0011 · Command and Control
Application Layer Protocol (C2)
Mitigation: M1031 Network Intrusion Prevention & Egress Filtering
Quelle: Kontext-Klassifikation des Artikeltextes
Reconnaissance
–
Resource Development
–
Initial Access
–
Execution
–
Persistence
–
Privilege Escalation
–
Defense Evasion
–
Credential Access
–
Discovery
–
Lateral Movement
–
Collection
–
Command and Control
Exfiltration
–
Impact