ID | Votes | Profile Description |
---|---|---|
TrailBlazer | 2 | Trailblazer is a sophisticated malware that was identified by CrowdStrike during StellarParticle-related investigations. The harmful program, designed to exploit and damage computers or devices, infiltrated victim systems around mid-2019. Two significant malware families were discovered: a Linux var |
ID | Type | Votes | Profile Description |
---|---|---|---|
TEARDROP | Unspecified | 2 | Teardrop is a sophisticated malware used in cyber attacks, often associated with APT29/Cozy Bear, a group known for deploying advanced tactics and techniques. It has been linked to the Solorigate (SUNBURST) backdoor and is part of a suite of tools including Raindrop, GoldMax, and others used by the |
SUNBURST | Unspecified | 2 | Sunburst is a sophisticated malware that has been linked to the Kazuar code, indicating its complexity. It was used in several well-known cyber attack campaigns such as SUNBURST, OilRig, xHunt, DarkHydrus, and Decoy Dog, which employed DNS tunneling techniques for command and control (C2) communicat |
Preview | Source Link | CreatedAt | Title |
---|---|---|---|
Malwarebytes | a year ago | Microsoft Teams used in phishing campaign to bypass multi-factor authentication | |
CERT-EU | a year ago | Microsoft Teams Users Targeted by Russian Threat Group | |
MITRE | 2 years ago | StellarParticle Campaign: Novel Tactics and Techniques | CrowdStrike | |
MITRE | 2 years ago | New sophisticated email-based attack from NOBELIUM - Microsoft Security Blog | |
MITRE | 2 years ago | GoldMax, GoldFinder, and Sibot: Analyzing NOBELIUM’s layered persistence - Microsoft Security Blog | |
MITRE | 2 years ago | Tomiris backdoor and its connection to Sunshuttle and Kazuar |