In this month’s edition of Cybersecurity Threat Spotlight, we’re digging into three of the cyberthreats currently impacting users: the APT MuddyWater, the RAT Manjusaka and the malvertising campaign SocGholish. Want to learn more about how Cisco Umbrella helps protect users? Request a free demo today! MuddyWater Threat Type: APT Delivery and Exfiltration: Description: MuddyWater (also […] The post September’s Threats:…
#cybersecurity threat spotlight
9 posts
20 Sept 2022
28 Jul 2022
In the latest edition of the Cybersecurity Threat Spotlight, the Cisco Secure threat analysts examine the expansion of an advanced persistent threat (APT) group, the evolution of a ransomware-as-a-service (RaaS) offering, and the rise of mobile malware. Want to learn more about how Cisco Umbrella can help protect your network against threats like these? Sign […] The post CrimsonRat, AvosLocker…
24 May 2022
This month, the Cisco Umbrella team – in conjunction with Talos – has witnessed the rise of complex cyberattacks. In today’s edition of the Cybersecurity Threat Spotlight, we unpack the tactics, techniques, and procedures used in these attacks. Want to see how Cisco Umbrella can protect your network? Sign up for a free trial today! […] The post BlackCat Ransomware,…
29 Mar 2022
This has been a busy month for cyber attackers, and the Cisco Umbrella team – in conjunction with Cisco Talos – has observed several new threats for users to be aware of. In this month’s edition of the Cybersecurity Threat Spotlight, we discuss a wiper making its way through Ukraine, a dropper targeting India and […] The post HermeticWiper, SDUser,…
18 Nov 2021
Ever wonder what happens when some of yesterday’s most crippling ransomware or RAT attacks evolve? That’s what we unpack in this month’s Cybersecurity Threat Spotlight. Our three cyberattacks wreak havoc by borrowing some of the most effective techniques and tools formerly used by DarkSide, REvil, LockBit, and the PlugX RAT. We break down this evolution […] The post BlackMatter, LockBit,…
19 Oct 2021
Cybersecurity Awareness Month may be in full swing, but that doesn’t mean that cybercriminals have been taking a break. In fact, the opposite is true – October has seen threats like ZLoader and HoneyGain have continued to evolve. Meanwhile, STRRAT has wreaked havoc by enabling bad actors to steal credentials and install additional malware. In […] The post STRRAT, ZLoader,…
26 Aug 2021
Summer may be winding down, but August was still an active month for cybercriminals. In this edition of Threat Spotlight, our cybersecurity threat analysis team discusses the ransomware attacks, trojans, and malware loaders that bad actors are currently using to cripple networks and steal data. Want to learn more about current threat trends? Check out […] The post Ransomware attacks,…
1 Jun 2021
In this second edition of the Cybersecurity Threat Spotlight, we’re examining the most important current threats including a backdoor threat, a remote access trojan (RAT), and a loader. Obfuscation, encryption, weaponization of normally benign files, and remote (frequently C2) execution continue to be primary techniques in ongoing use. Threat Name: GoldMax Threat Type: BackdoorActor: NOBELIUMhttps://attack.mitre.org/groups/G0118/Delivery […] The post Backdoors, RATs,…
8 Apr 2021
Welcome to the first monthly edition of the Cisco Umbrella Threat Spotlight, which is produced by our cybersecurity threat analysis team. This team supports the collection, analysis and distribution of threat intelligence from the Cisco global cloud architecture. The Cisco Umbrella security researchers take mathematical concepts and find new ways to apply them to security […] The post Trojans, information…