GLESEC’s

SKYWATCHSM ALERTS

Kofurlak Ransomware
October 29, 2024

New ransomware family is based on leaked LockBit source codeNew China-Linked Group CeranaKeeper Targeted Thailand Government Entities With CustomMalware in Data Theft CampaignsNew China-Linked Group CeranaKeeper Targeted Thailand Government Entities…

Read More...
Threat Actors Target Unpatched Linux Server Vulnerabilities With Malware Dubbed PERFCTL
October 29, 2024

A Linux malware dubbed “perfctl” was identified exploiting over 20000 types ofmisconfigurations to target Linux servers worldwide.Once compromised the malware remains dormant until the server is idle employing rootkitsto conceal…

Read More...
Analyzing Recent Cyber Attacks in the United States Coinciding with
October 29, 2024

The United States has experienced a significant increase in cyber attacks from June to October 2024with over 800 organizations affected by ransomware across various sectors.Play RansomHub Lockbit Qilin and Meow…

Read More...
Exploring GenAI in Cybersecurity Gemini for Malware Analysis
October 28, 2024

This analysis explores the application of Generative AI specifically Googles Gemini Advanced inmalware analysis.The experiment focuses on analyzing executable files particularly a RisePro Stealer sample.The methodology involves decompiling the malware…

Read More...
FIN8 Uses Revamped Sardonic Backdoor to Deliver Noberus Ransomware
July 20, 2023

Symantecs Threat Hunter Team recently observed the Syssphinx (aka FIN8) cyber-crime group deploying a variant of the Sardonic backdoor to deliver the Noberus ransomware.

Read More...