50 000 companies compromised, 700 Italian organisations among them
Mass compromise impacting 50 000 organisations globally with 700 Italian entities affected: scope, exploitation chain and defensive priorities.
Category
Emerging Threats
Read the analysis
Cyber Defence: 3 priorities for enterprise security
Three foundational defensive activities every organisation should run continuously: monitoring, detection-engineering and incident response — paired with threat intelligence.
Under Ransomware attack — the story of an incident response
Field account of a ransomware incident response engagement: initial scoping, eradication, recovery decisions and lessons learned about preparation gaps.
How to reduce the likelihood of a Ransomware attack
Practical guidance to reduce ransomware risk: addressing the ‘we’re not a target’ fallacy, exposed services, weak credentials, missing backup discipline and detection gaps.
Emotet Trojan — 23 September 2020
Emotet malspam wave of 23 September 2020: three distinct delivery patterns, document macro chain, payload deployment and host-level indicators.
Trojan Emotet – Rientro di Settembre
Campagna malware Emotet (Trojan Bancario), che ha targettizzato utenti italiani di rientro dalle ferie estive. Info sul Malware Emotet ” While Emotet historically was a banking malware organized in a botnet, nowadays Emotet is mostly seen as infrastructure as a service for content delivery. For example, since mid 2018 it is used by Trickbot for … Read more
Cyber attack trends during the lockdown
Cyber attack patterns during pandemic lockdowns: COVID-themed lures, remote-work exposure, VPN brute-forcing trends and shifting targeting priorities.
Email: 5 tips to protect against attacks
Five practical guidelines to reduce exposure to email-borne threats: phishing, attachment macros, sender spoofing, MFA and user awareness — what works and what does not.
Red Teaming Series — Antivirus Bypass
Antivirus evasion techniques in red-team operations: payload encoding, signature avoidance, behavioural-detection bypass and corresponding defensive lessons.
