Unit 42 Archives

6,665

people reacted

Evade Sandboxes With a Single Bit – the Trap Flag

By Mark Lim
July 19, 2021 at 3:30 PM

5 min. read

12,243

people reacted

Mespinoza Ransomware Gang Calls Victims “Partners,” Attacks with Gasket, "MagicSocks" Tools

By Robert Falcone, Alex Hinchliffe and Quinn Cooke
July 15, 2021 at 3:00 AM

23 min. read

A conceptual image representing a threat brief, such as this post, covering CVE-2021-34527

10,213

people reacted

Threat Brief: Windows Print Spooler RCE Vulnerability (CVE-2021-34527 AKA PrintNightmare)

By Unit 42
July 14, 2021 at 4:00 PM

2 min. read

A conceptual image representing the REvil threat actors discussed in the post.

31,420

people reacted

Understanding REvil: The Ransomware Gang Behind the Kaseya VSA Attack

By John Martineau
July 6, 2021 at 2:50 PM

7 min. read

A conceptual image representing trends, such as the network attack trends for February-April 2021.

11,073

people reacted

Network Attack Trends: February-April 2021

By Yue Guan, Lei Xu, Vaibhav Singhal and Brock Mammen
July 1, 2021 at 3:00 PM

10 min. read

The Conti ransomware gang gets an overview.

18,999

people reacted

Conti Ransomware Gang: An Overview

By Richard Hickman
June 18, 2021 at 6:00 AM

5 min. read

A conceptual image representing adversaries and their tactics, such as the Matanbuchus malware-as-a-service described here.

18,955

people reacted

Matanbuchus: Malware-as-a-Service with Demonic Intentions

By Jeff White and Kyle Wilhoit
June 16, 2021 at 7:32 AM

9 min. read

A conceptual image representing Prometheus ransomware

28,973

people reacted

Prometheus Ransomware Gang: A Group of REvil?

By Doel Santos
June 9, 2021 at 3:00 AM

9 min. read

A conceptual image representing threats in the cloud, such as TeamTNT, which is expanding its cryptojacking footprint with new TTPs.

20,041

people reacted

TeamTNT Using WatchDog TTPs to Expand Its Cryptojacking Footprint

By Nathaniel Quist
June 8, 2021 at 6:00 AM

9 min. read

A conceptual image representing Siloscape, the first known malware targeting Windows containers.

43,161

people reacted

Siloscape: First Known Malware Targeting Windows Containers to Compromise Cloud Environments

By Daniel Prizmant
June 7, 2021 at 3:00 AM

11 min. read

A conceptual image representing cloud misconfigurations, which can often be a vector for attackers such as TeamTNT to perform activities such as enumerating cloud environments.

21,815

people reacted

TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations

By Nathaniel Quist
June 4, 2021 at 6:00 AM

13 min. read

A conceptual image representing Docker and related container security issues, such as those revealed by the Docker honeypot discussed here.

25,628

people reacted

Docker Honeypot Reveals Cryptojacking as Most Common Cloud Threat

By Aviv Sasson
May 27, 2021 at 12:00 PM

5 min. read

Learn From a Wiped Computer with Digital Forensics

24,105

people reacted

What Can You Learn From a “Wiped” Computer With Digital Forensics?

By Michael Savitz
May 27, 2021 at 12:00 AM

4 min. read

Machine Learning Command and Control project detects C2 traffic types.

25,552

people reacted

Using AI to Detect Malicious C2 Traffic

By Ajaya Neupane and Stefan Achleitner
May 24, 2021 at 6:00 AM

8 min. read

A conceptual image representing ransomware attacks

23,117

people reacted

Breaking Down Ransomware Attacks

By Jeremy Brown and Ashlie Blanca
May 21, 2021 at 6:00 PM

6 min. read

Category: Unit 42

Evade Sandboxes With a Single Bit – the Trap Flag

Mespinoza Ransomware Gang Calls Victims “Partners,” Attacks with Gasket, "MagicSocks" Tools

Threat Brief: Windows Print Spooler RCE Vulnerability (CVE-2021-34527 AKA PrintNightmare)

Understanding REvil: The Ransomware Gang Behind the Kaseya VSA Attack

Network Attack Trends: February-April 2021

Conti Ransomware Gang: An Overview

Matanbuchus: Malware-as-a-Service with Demonic Intentions

Prometheus Ransomware Gang: A Group of REvil?

TeamTNT Using WatchDog TTPs to Expand Its Cryptojacking Footprint

Siloscape: First Known Malware Targeting Windows Containers to Compromise Cloud Environments

TeamTNT Actively Enumerating Cloud Environments to Infiltrate Organizations

Docker Honeypot Reveals Cryptojacking as Most Common Cloud Threat

What Can You Learn From a “Wiped” Computer With Digital Forensics?

Using AI to Detect Malicious C2 Traffic

Breaking Down Ransomware Attacks

Popular Resources

Legal Notices

Account

Trending

Popular Resources

Legal Notices

Account