/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 lab52.io
Mustang Panda's PlugX new variant targetting Taiwanese government and diplomats
| | blog.talosintelligence.com
Threat actors use copyright infringement phishing lure to deploy infostealers
2.0 parsecs away

Travel
| | * Cisco Talos has observed an unknown threat actor conducting a phishing campaign targeting Facebook business and advertising account users in Taiwan. * The decoy email and fake PDF filenames are designed to impersonate a company's legal department, attempting to lure the victim into downloading and executing malware. * This campaign abuses Google's
| | blog.eclecticiq.com
Mustang Panda APT Group Uses European Commission-Themed Lure to Deliver PlugX Malware
2.3 parsecs away

Travel
| | EclecticIQ researchers continue to track a Chinese state-sponsored APT group called Mustang Panda. In December 2022, this group started targeting Europe with a new spearphishing campaign using a customized variant of the PlugX backdoor.
| | securityinaction.wordpress.com
Defending against recent and older cyber attacks | securityinaction
3.0 parsecs away

Travel
| | TL; DR In recent months threat actors have been leveraging alternative means of compromising Windows based systems in order to evade detection. Make certain to download and install software from legitimate sources and where possible make use of the Windows driver blocklist (further recommendations listed below). ==================== By employing techniques such as DLL sideloading (defined...
| | eapolsniper.github.io
Abusing Splunk Forwarders For Shells and Persistence ยท Eapolsniper's Blog
17.4 parsecs away

Travel
| [AI summary] The blog post discusses a critical security vulnerability in Splunk Universal Forwarders, allowing attackers to exploit weak passwords and API access to gain SYSTEM or root privileges on networked systems.