APT | Security Joes

Operation Ice Breaker Targets The Gam(bl)ing Industry Right Before It's Biggest Gathering

In September of last year, our Incident Response team was called to an incident that was identified as an attempt of social engineering...

5,788 views0 comments

Dissecting PlugX To Extract Its Crown Jewels

PlugX is a malware family first spotted in 2008. It is a Remote Access Trojan that has been used by several threat actors and provides...

Backdoor Via XFF - Mysterious Threat Actor Under Radar

Our incident response team caught a strange-looking Webshell activity on a server that was running an internal web application. It raised...

Sockbot in Goland - Linking APT Actors With Ransomware Gangs

Our incident response team had responded to malicious activity in one of our clients' network infrastructure. A compromised Secure Access...

Hackers fork open-source reverse tunneling tool for persistence

Security experts have spotted an interesting case of a suspected ransomware attack that employed custom-made tools typically used by APT...

APT27 Turns To Ransomware

At the peak of the COVID-19 pandemic and economic crisis, our Global Incident Response and Cyber Crisis Management teams were engaged on...

Offices