Broad-Based Attacks

Response to CISA Advisory (AA24-317A): 2023 Top Routinely Exploited Vulnerabilities

| | adversary emulation, Broad-Based Attacks, CISA Alert
In response to the recently published CISA Advisory (AA24-317A) that disseminates the top routinely exploited vulnerabilities from 2023, AttackIQ has proposed a multitude of recommendations that customers can take to emulate these ...
AttackIQ

Emulating the Opportunistic and Lightweight Lumma Stealer

| | adversary emulation, Broad-Based Attacks, Lumma Stealer, LummaC2, Malware, Malware-as-a-Service (MaaS)
AttackIQ has released a new assessment template that addresses the numerous post-compromise Tactics, Techniques, and Procedures (TTPs) associated with the subscription-based information stealer known as Lumma Stealer. The post Emulating the Opportunistic ...
AttackIQ

Emulating the Surging Hadooken Malware

| | adversary emulation, Broad-Based Attacks, cryptomining, Hadooken, Linux, Malware, Oracle, Remote Code Execution (RCE), Weblogic Servers
AttackIQ has released a new attack graph that emulates the behaviors exhibited by the Hadooken malware during intrusions that abused misconfigurations and critical Remote Code Execution (RCE) vulnerabilities on public-facing Oracle Weblogic ...
AttackIQ

Emulating the Petrifying Medusa Ransomware

| | adversary emulation, Broad-Based Attacks, living off the land, Medusa, RaaS, Ransomware, ransomware as a service
AttackIQ has released a new attack graph that emulates the behaviors exhibited by Medusa ransomware since the beginning of its activities in June 2021. Medusa is predominantly propagated through the exploitation of ...
AttackIQ

Emulating the Persistent and Stealthy Ebury Linux Malware

| | adversary emulation, Broad-Based Attacks, Credential Access, ddos, distributed denial of service, Ebury, Linux, Malware, SSH
AttackIQ has released a new attack graph that seeks to emulate the Tactics, Techniques and Procedures (TTPs) associated with Ebury Linux malware. Despite previous arrests and actions against key perpetrators, Ebury continues ...
AttackIQ

Response to CISA Advisory (AA24-242A): #StopRansomware: RansomHub Ransomware

| | #StopRansomware, adversary emulation, Broad-Based Attacks, RansomHub, Ransomware, ransomware as a service
AttackIQ has released a new assessment template in response to the CISA Advisory (AA24-207A) published on August 29, 2024, that disseminates known RansomHub ransomware IOCs and TTPs that have been identified through ...
AttackIQ

Emulating the Extortionist Mallox Ransomware

| | adversary emulation, Broad-Based Attacks, FARGO, Mallox, MS-SQL, Ransomware, TargetCompany, Tohnichi
AttackIQ has released a new attack graph that emulates the behaviors exhibited by Mallox ransomware since the beginning of its activities in June 2021. Mallox primarily gains access to victim networks through ...
AttackIQ

Emulating Sandworm’s Prestige Ransomware

| | adversary emulation, Broad-Based Attacks, living off the land, Microsoft, Microsoft Threat Intelligence Center (MSTIC), Poland, Prestige, Ransomware, Russia, Sandworm, Ukraine
AttackIQ has released a new attack graph that emulates the behaviors exhibited by Prestige ransomware since the beginning of its activities in October 2022. Prestige has been observed targeting organizations in the ...
AttackIQ

Emulating the Prickly Cactus Ransomware

| | adversary emulation, Broad-Based Attacks, cactus, Ransomware, SSH, VPN
AttackIQ has released a new attack graph that emulates the behaviors exhibited by the Cactus ransomware since the beginning of its activities in March 2023. Cactus has targeted a wide variety of ...
AttackIQ

Emulating the Long-Term Extortionist Nefilim Ransomware

| | adversary emulation, Broad-Based Attacks, Financial Services, manufacturing, Nefilim, RaaS, Ransomware, ransomware as a service, transportation
AttackIQ has released a new attack graph that emulates the behaviors exhibited by the extortionist ransomware Nefilim during activities against multiple organizations, primarily based in North or South America, distributed in the ...
AttackIQ
Load more