Externally Exposed – How AI-Driven Threats Are Reshaping the External Risk Landscape Date: June 16, 2926 Time: 11:00 Am IST I 3.30PM AEST Duration: 60 Minutes Register Now Overview AI-driven cyber threats are rapidly transforming the external threat landscape. Attackers are using AI to automate reconnaissance, accelerate exploitation, scale phishing campaigns, and target exposed digital […]
Weekly Intelligence Trends/Advisory Key Intelligence Signals: Attack Type: Ransomware, Vulnerabilities & Exploits, Ransomware-as-a-Service (RaaS), Malware Implants, Data Exfiltration, Data Leak, Impersonations, Remote Code Execution (RCE), On-device Fraud, Rouge Mobile Apps, Telephone-Oriented Attack Delivery (TOAD), SMiSing, Malvertising Objective: Unauthorized Access, Data Theft, Financial Gains, Payload Delivery, Potential Espionage Business Impact: Data Loss, Financial Loss, Reputational Damage, […]
FinTech Alliance Philippines will leverage CYFIRMA’S external threat landscape insights and digital risk monitoring platforms to help fast-growing FinTech startups protect their intellectual property and customer data from cyberattacks and build greater cybersecurity awareness across the ecosystem Manila, Philippines and Singapore – Nov 3, 2022 – CYFIRMA, the industry’s first external threat landscape management […]
Weekly Intelligence Trends/Advisory Key Intelligence Signals: Attack Type: Ransomware, Vulnerabilities & Exploits, Ransomware-as-a-Service (RaaS), Malware Implants, Data Exfiltration, Data Leak, Impersonations, Data Encryption, Cryptojacking, Path Traversal Objective: Unauthorized Access, Data Theft, Financial Gains, Payload Delivery, Espionage, Crypto Mining Business Impact: Data Loss, Financial Loss, Reputational Damage, Loss of Intellectual Property Ransomware – Hive | Malware […]
Weekly Intelligence Trends/Advisory Key Intelligence Signals: Attack Type: Ransomware, Vulnerabilities & Exploits, Ransomware-as-a-Service (RaaS), Malware Implants, Data Exfiltration, Data Leak, Impersonations, DLL-side Loading, ACE (Arbitrary Code Execution), OS Command Injection, Data Exfiltration, Data Encryption, Code Execution, DoS (Denial-of-Service) Objective: Unauthorized Access, Data Theft, Financial Gains, Payload Delivery, Espionage Business Impact: Data Loss, Financial Loss, Reputational […]
Threat Actor in Focus – Mustang Panda Target Myanmarese Users by Abusing Legitimate Apps Suspected Threat Actors: Mustang Panda Attack Type: Malware Implants, Impersonations, Potential Phishing, DLL-side Loading Objective: Unauthorized Access, Payload Delivery, Potential Data Theft Target Technology: Email Targeted Industry: Media Target Geography: Myanmar Business Impact: Data Loss, Potential Financial Loss Summary: Researchers have […]
Threat Actor in Focus – Lazarus Group Target Dell Driver Using New FudModule Rootkit Suspected Threat Actors: Lazarus Group Attack Type: Spearphishing, Malware Implants, Vulnerabilities & Exploits, Bring Your Own Vulnerable Driver (BYOVD), Social Engineering, Impersonations, Espionage Objective: Data Theft, Payload Delivery, Unauthorized Access Target Technology: Dell DBUtil Drivers, Windows, Email, Social Media/ LinkedIn Targeted […]
CYFIRMA and D3 Security establish strategic partnership to help businesses fight cybercrime with predictive insights and cyber-intelligence D3 Security’s leading SOAR tool will leverage CYFIRMA’S external threat landscape insights to give businesses visibility to emerging cyber threats so they can mitigate risk and grow their business Singapore – Oct 3, 2022 – CYFIRMA, the world’s […]
Threat Actor in Focus – APT41 Cyberattack on Healthcare and Pharmaceuticals Continues Attack Type: Malware Implants, Data Exfiltration, Vulnerabilities & Exploits Objective: Espionage, Payload Delivery, Unauthorized Access, Data Theft Target Technology: Unified Extensible Firmware Interface (UEFI), Web Application, Log4j, Targeted Industry: Healthcare, Pharmaceuticals Target Geography: US, Asia Business Impact: Financial Loss, Data Loss, Reputational Damage, Loss […]
Daiwabo Information System Signs Distributor Agreement with CYFIRMA With this partnership, Daiwabo Information System Ltd. will bring CYFIRMA’s DeTCT platform to its network of 19,000 reseller partners across 90 sales offices in Japan Daiwabo Information System Ltd, a leading technology distributor in Japan and CYFIRMA K.K. Ltd., an external threat landscape management platform company, has […]
Threat Actor in Focus – New Gamaredon Campaign Targets Ukrainian Government Agencies Suspected Threat Actors: Gamaredon (aka Armageddon, Armagedon, Shuckworm, UAC-0010) Attack Type: Phishing, Malware Implants, Data Exfiltration Objective: Espionage, Payload Delivery, Unauthorized Access, Data Theft Target Technology: Microsoft Office documents, PowerShell, VBScript, Windows Targeted Industry: Government Target Geography: Ukraine Business Impact: Financial Loss, Data […]
Threat Actor in Focus – Lazarus and the Tale of Three RATs Attack Type: Vulnerabilities and Exploits, Malware Implants, Potential Data Exfiltration, Defence Evasion, Persistence, Reconnaissance, Lateral Movement, Credential Harvesting, Path Filter Bypass, Cross-Site Scripting (XSS) Objective: Espionage, Payload Delivery, Unauthorized Access, Data Theft Target Technology: VMWare Horizon Targeted Industry: Energy Target Geography: United States, Canada, […]
Singapore – Sep 13, 2022 – CYFIRMA, an external threat landscape and cyber-intelligence platform company, with business operations across APAC, EMEA and the US, today announced that it has named veteran technology leader Mike Henry as its Chief Technology Officer. Prior to joining CYFIRMA, he was the Chief Technology Officer for Singapore Sports Hub, an […]
Threat Actor in Focus DangerousSavanna Campaigns Targeting Financial Institutions in French-speaking Africa Suspected Threat Actors: Unknown Attack Type: Spear-phishing, Impersonation, Malware Implants, Data Exfiltration, Defence Evasion, Persistence, Reconnaissance Objective: Financial Gains Target Technology: Email, Microsoft Office documents, PDFs, ISO, LNK, JAR and VBE Files Targeted Industry: Finance, Banking, Insurance Target Geography: Multiple French-Speaking African Countries […]
BRIHTEJE PARTNERS WITH CYFIRMA TO STRENGTHEN THE CYBER POSTURE OF SLOVENIAN ORGANIZATIONS Slovenian companies and public institutions will have peace of mind with a new contribution in the field of cyber security, an advanced turnkey service offered exclusively for Slovenia by the company Brihteja Most organizations are aware that in order to ensure reliable and […]
Threat Actor in Focus: Chinese Threat Actor Group’s Espionage Operation in the South China Sea Suspected Threat Actors: TA423 / Red Ladon (aka APT40, Leviathan, GADOLINIUM) Attack Type: Phishing, Impersonation, Malware Implants, Data Exfiltration, RTF Template Injection Objective: Espionage, Data Theft Target Technology: Email, Microsoft Word, Windows Targeted Industry: Government, Media, Manufacturing (Heavy Industry), Energy […]
Threat Actor in Focus : APT29 Continue to Target Microsoft 365 Suspected Threat Actors: APT29 (Cozy Bear, Cozer, CozyDuke, EuroAPT, Fritillary, Group 100, IRON HEMLOCK, Minidionis, Nobelium, Office Monkeys, TEMP.Monkeys, The Dukes) Attack Type: Data Theft, Brute Force/ Password Guessing Attack, Bypassing MFA Objective: Espionage, Data Theft Target Technology: Microsoft 365 Targeted Industry: Government/ Foreign […]
Over 80,000 exploitable Hikvision cameras exposed online Security researchers have discovered over 80,000 Hikvision cameras vulnerable to a critical command injection flaw that’s easily exploitable via specially crafted messages sent to the vulnerable web server. The flaw is tracked as CVE-2021-36260 and was addressed by Hikvision via a firmware update in September 2021. However, according […]
Experts warn that over 80,000 Hikvision cameras are vulnerable to a critical command injection vulnerability Security researchers from CYFIRMA have discovered over 80,000 Hikvision cameras affected by a critical command injection vulnerability tracked as CVE-2021-36260. The Chinese vendor addressed the issue in September 2021, but tens of thousands of devices are yet to be patched. An attacker can […]
Threat Actor in Focus – Russian Linked Shuckworm Continues to Maintain Focus on Ukraine Suspected Threat Actors: Shuckworm (aka Gamaredon, Armageddon) Attack Type: Malware Implant, Data Exfiltration, Potential Espionage, Spoofing, Potential Impersonation Objective: Data Theft, Payload Delivery Target Technology: Email, Windows Target Geography: Ukraine Business Impact: Data Loss, Financial Loss Summary: Researchers observed that recent […]
