APT | Security Joes

Dissecting PlugX To Extract Its Crown Jewels

PlugX is a malware family first spotted in 2008. It is a Remote Access Trojan that has been used by several threat actors and provides...

Backdoor Via XFF - Mysterious Threat Actor Under Radar

Our incident response team caught a strange-looking Webshell activity on a server that was running an internal web application. It raised...

Sockbot in Goland - Linking APT Actors With Ransomware Gangs

Our incident response team had responded to malicious activity in one of our clients' network infrastructure. A compromised Secure Access...

Hackers fork open-source reverse tunneling tool for persistence

Security experts have spotted an interesting case of a suspected ransomware attack that employed custom-made tools typically used by APT...

APT27 Turns To Ransomware

At the peak of the COVID-19 pandemic and economic crisis, our Global Incident Response and Cyber Crisis Management teams were engaged on...

Offices