eSecurity Planet

DECEMBER 8, 2023

Domain name service (DNS) attacks threaten every internet connection because they can deny, intercept, and hijack connections. With the internet playing an increasing role in business, securing DNS plays a critical role in both operations and security. TLS and HTTPS inherently create secured and encrypted sessions for communication.

DNS 111

DNS DDOS Firewall Architecture 111

SecureList

OCTOBER 25, 2023

It comes equipped with a built-in TOR network tunnel for communication with command servers, along with update and delivery functionality through trusted services such as GitLab, GitHub, and Bitbucket, all using custom encrypted archives. Subsequent analysis revealed earlier instances of suspicious code dating back to 2017.

Malware 114

Malware DNS Encryption Cryptocurrency 114

eSecurity Planet

MAY 19, 2022

Alongside its over 200 acquisitions in four decades, Cisco acquired SD-WAN market innovator Viptela in 2017 to cement its commitment to internet-based networking solutions. Networking and IT giant Cisco is an undisputed leader in the secure SD-WAN solution space. Features: Cisco SD-WAN. Features: Juniper Session Smart Routers and SASE.

Firewall 117

Firewall Architecture Encryption Network Security 117

Security Boulevard

JUNE 15, 2023

Enter Mystic Stealer, a fresh stealer lurking in the cyber sphere, noted for its data theft capabilities, obfuscation, and an encrypted binary protocol to enable it to stay under the radar and evade defenses. Example Mystic Stealer constant obfuscation technique Encrypted binary custom protocol. All data is encrypted with RC4.

Cryptocurrency 52

Cryptocurrency Password Management Malware DNS 52

SecureList

MAY 31, 2021

Further investigation of the Sunburst backdoor revealed several features that overlap with a previously identified backdoor known as Kazuar , a.NET backdoor first reported in 2017 and tentatively linked to the Turla APT group. Ransomware encrypting virtual hard disks. macOS developments.

Malware 101

Malware Adware Encryption Architecture 101

Fox IT

JUNE 23, 2020

Evil Corp were previously associated to the Dridex malware and BitPaymer ransomware, the latter came to prominence in the first half of 2017. Hence, TA505 activity is sometimes still reported as Evil Corp activity, even though these groups have not worked together since the second half of 2017. WastedLocker Ransomware.

Ransomware 45

Ransomware Encryption Malware Architecture 45

Cisco Security

AUGUST 28, 2023

XDR (eXtended Detection and Response) Integrations At Black Hat USA 2023, Cisco Secure was the official Mobile Device Management, DNS (Domain Name Service) and Malware Analysis Provider. SCA detected 289 alerts including Suspected Port Abuse, Internal Port Scanner, New Unusual DNS Resolver,and Protocol Violation (Geographic).

Wireless 60

Wireless DNS Mobile Technology 60