Business Email Compromise – old scams, new techniques
One of the most widespread cybercrimes in recent years is Business Email Compromise. Let’s see what’s the process of this kind of cyberattack.
Incident Response
Infostealer infection through fake Windows Update Error Fix
An infostealer infection effecting through a fake Windows update error fix with a premade script is analysed by our experienced colleagues.
MedusaLocker ransomware – Part 2
After discussing the nature of ransomware attacks and aspects of MedusaLocker’s behavior, we delve into the malware analysis and explain why it is interesting.
When the attacker gets attacked: The LockBit story
International cyber law enforcement team succeeds in liquidating the LockBit Ransomware Group.
A Medusa, you really don’t want to encounter
Understanding MedusaLocker, a type of ransomware, is crucial as it poses a significant threat to both individuals and organizations.
Ransomware groups – who are they, what do they want and how do they do it?
Ransomware – a cybersecurity term that is now familiar to the general public as it has a detrimental impact on all areas of the economy.
Developers in the crosshairs – why are there more and more cyber attacks against software vendors?
Why are there more and more cyber attacks on software development environments and how is software company security becoming a key issue in the supply chain?
Analysing a latent malware infection on a recently MDE-onboarded machine (Part 2)
Recently, an interesting latent malware infection was found on a newly onboarded machine at one of our clients (Client). Microsoft Defender for Endpoint (MDE) reported anomalies about the computer shortly after onboarding, but uncovering the inner workings of the malware and the infection methods required thorough investigation We present the ...
Analysing a latent malware infection on a recently MDE-onboarded machine (Part 1)
Recently, an interesting latent malware infection was found on a newly onboarded machine at one of our clients (Client). Microsoft Defender for Endpoint (MDE) reported anomalies about the computer shortly after onboarding, but uncovering the inner workings of the malware and the infection methods required thorough investigation, which anonymized version ...