Security Affairs

OCTOBER 2, 2020

The APT group, recently discovered by ESET, targeted government and private companies in Belarus, Moldova, Russia, Serbia, and Ukraine, including militaries and Ministries of Foreign Affairs. “It is very uncommon to find a cyber espionage operation without any public reporting after almost 10 years of activity.”

Military 135

Military Phishing Passwords Government 135

Security Affairs

FEBRUARY 17, 2020

Security experts from Yoroy-Cybaze ZLab have conducted a detailed analysis of an implant used by the Gamaredon APT group in a recent campaign. Gamaredon has been active since 2014, and during this time, the modus operandi has remained almost the same. Technical Analysis. Introduction. Cleaning the script we obtain: Figure 9.

Archiving 90

Archiving Military IT Phishing 90

Security Affairs

OCTOBER 17, 2018

Today I’d like to share an interesting analysis of a Targeted Attack found and dissected by Yoroi (technical details are available here ). The victim was one of the most important leaders in the field of security and defensive military grade Naval ecosystem in Italy. For IoC please visit the analysis from here.

Computer and Electronics 87

Computer and Electronics Encryption Military Security 87

Security Affairs

OCTOBER 28, 2019

Security expert Marco Ramilli published a quick analysis of an interesting attack carried out by SWEED threat actor targeting precision engineering firms in Italy. Today I’d like to share a quick analysis of an interesting attack targeting precision engineering companies based in Italy. Technical Analysis. Introduction.

Passwords 44

Passwords Encryption File names Military 44

Security Affairs

JUNE 4, 2019

During recent times, Gamaredon is targeting the Ukrainian military and law enforcement sectors too, as officially stated by the CERT-UA. Technical Analysis. The infection chain is composed by different stages of password protected SFX (self extracting archive), each containing vbs or batch scripts. Malicious e-mail.

Archiving 61

Archiving Passwords File names Military 61

Data Matters

APRIL 23, 2018

Commonly used in military contexts, mandatory policies imply that all access control policy decisions are made by a centralized authority, such that individual users cannot change access rights. The 2018 guidance supplements the SEC’s October 13, 2011, CF Disclosure Guidance: Topic No. Mandatory Access Control. Role-Based Access Control.

Cybersecurity 60

Cybersecurity Risk Passwords Authentication 60