APT | Security Joes

Sep 4, 202318 min read

New Attack Vector In The Cloud: Attackers caught exploiting Object Storage Services

Security Joes Incident Response team recently became aware of a set of relatively new CVEs that were released at the end of March 2023....

9,443 views0 comments

Feb 1, 202313 min read

Operation Ice Breaker Targets The Gam(bl)ing Industry Right Before It's Biggest Gathering

In September of last year, our Incident Response team was called to an incident that was identified as an attempt of social engineering...

6,884 views0 comments

Sep 14, 20221 min read

Dissecting PlugX To Extract Its Crown Jewels

PlugX is a malware family first spotted in 2008. It is a Remote Access Trojan that has been used by several threat actors and provides...

Jun 15, 20221 min read

Backdoor Via XFF - Mysterious Threat Actor Under Radar

Our incident response team caught a strange-looking Webshell activity on a server that was running an internal web application. It raised...

Mar 9, 20221 min read

Sockbot in Goland - Linking APT Actors With Ransomware Gangs

Our incident response team had responded to malicious activity in one of our clients' network infrastructure. A compromised Secure Access...

Mar 9, 20221 min read

Hackers fork open-source reverse tunneling tool for persistence

Security experts have spotted an interesting case of a suspected ransomware attack that employed custom-made tools typically used by APT...

Jan 4, 20211 min read

APT27 Turns To Ransomware

At the peak of the COVID-19 pandemic and economic crisis, our Global Incident Response and Cyber Crisis Management teams were engaged on...

Offices