Updated - Cybersec Sentinel

Updated

A collection of 5 posts

Scattered Spider Shifts to Aviation, Retail, and Transport in Latest Campaigns

Scattered Spider Shifts to Aviation, Retail, and Transport in Latest Campaigns

Threat Group: Scattered Spider Threat Type: Cybercrime Group (Focused on Cloud Environments, Ransomware) Exploited Vulnerabilities: Azure Cross-Tenant Synchronization, Federated Identity Providers, Cloud Platforms Malware Used: AlphV ransomware, Spectre RAT Threat Score: 🔴 High (8.8/10) – Due to its sophisticated exploitation of cloud-based systems, privilege escalation methods, and use of advanced

Qilin.B New Variant Disrupts Backups and Evades Detection Tools

Qilin.B New Variant Disrupts Backups and Evades Detection Tools

Threat Group: Qilin (formerly Agenda) Threat Type: Ransomware-as-a-Service (RaaS) Exploited Vulnerabilities: Weak credentials, network misconfigurations Malware Used: Qilin.B variant Threat Score: High (8.5/10) — Due to enhanced encryption, evasion, and the ability to disrupt backup systems. Last Threat Observation: October 2024, spotted in attacks against healthcare and large

Akira Ransomware Adapts Its Tactics to Exploit Major Vulnerabilities in 2024

Akira Ransomware Adapts Its Tactics to Exploit Major Vulnerabilities in 2024

Threat Group: Akira Ransomware Threat Type: Ransomware Exploited Vulnerabilities: , CVE-2024-40766 (SonicWall), CVE-2020-3259 (Cisco), CVE-2023-20263 (Cisco), CVE-2023-20269 (Cisco), CVE-2023-27532 (Veeam), CVE-2023-48788 (Ubuntu), CVE-2024-37085 (SAP), CVE-2024-40711 (Microsoft) Malware Used: Akira, Megazord Threat Score: 8.5/10 Last Threat Observation: October 22, 2024 (Resurfaced) Overview Akira ransomware has resurfaced with advanced capabilities, exploiting

Bumblebee Malware Adapts to Evade Detection in New Attack Campaign

Bumblebee Malware Adapts to Evade Detection in New Attack Campaign

Threat Group: Likely Trickbot or Conti affiliates Threat Type: Malware Loader Exploited Vulnerabilities: Social engineering, phishing emails, MSI installer misuse Malware Used: Bumblebee Threat Score: High (8.5/10) Last Threat Observation: October 2024 (Resurfaced) Overview Bumblebee, a sophisticated malware loader, has resurfaced in October 2024, just months after law

WarmCookie Malware Hijacking Google Accounts

WarmCookie Malware Hijacking Google Accounts

Report Updated: October 19, 2024 Threat Group: SocGolish Threat Type: Backdoor Malware Exploited Vulnerabilities: Misleading browser update pop-ups Malware Used: WarmCookie Threat Score: 8.2/10 (High risk due to widespread phishing campaigns and advanced backdoor capabilities) Last Threat Observation: October 7, 2024 Overview WarmCookie is a Windows backdoor malware