Cybereason – Cybersecurity News Everyday

From Noise to Clarity: The Value of MalOp™ Technology in Modern Cyber Defense

January 24, 2025 Cybereason

This article discusses the latest MITRE ATT&CK® Evaluations for 2024, focusing on advanced threats such as ransomware and macOS attacks. It highlights Cybereason’s MalOp™ technology, which offers a comprehensive view of attacker activities, enhancing security operations by reducing alert fatigue and improving incident response. Affected: Windows, macOS

Keypoints :

The MITRE ATT&CK® Evaluations assess how well security vendors combat advanced threats.…

Threat Research

Your Data Is Under New Lummanagement: The Rise of LummaStealer

December 18, 2024 Cybereason

Summary :

Cybereason Security Services has released a Threat Analysis report detailing the increasing activity of the LummaStealer malware, which operates as a Malware-as-a-Service (MaaS) offering. The report highlights diverse infection vectors, advanced social engineering tactics, and the significant risks posed by this malware to individuals and organizations.…

Threat Research

Stellar Discovery of A New Cluster of Andromeda/Gamarue C2

December 4, 2024 Cybereason

Summary: Cybereason Security Services has identified a new cluster of Command and Control (C2) servers associated with the Andromeda/Gamarue malware, which is targeting manufacturing and logistics companies in the APAC region. The investigation revealed the use of infected USB drives as the initial infection vector, leading to industrial espionage activities.…

Threat Research

“Beast Ransomware Threat Analysis”

October 19, 2024 Cybereason

Short Summary:

The Cybereason Threat Analysis report investigates the Beast Ransomware-as-a-Service (RaaS) platform, detailing its capabilities, operational methods, and recommendations for defense. The report highlights the group’s expanding marketplace, customizable binaries, and advanced detection and prevention techniques employed by the Cybereason Defense Platform.

Key Points:

Expanding Marketplace: Beast Ransomware group continuously updates tools to attract a wider audience in the cybercrime ecosystem.…

Threat Research

CUCKOO SPEAR Part 2: Arsenal of Threat Actors

October 5, 2024 Cybereason

Short Summary:

The article provides an in-depth analysis of the NOOPLDR and NOOPDOOR malware tools, focusing on their capabilities, methods of operation, and persistence mechanisms. It details how these tools utilize DLL side-loading, code obfuscation, and registry manipulation to execute malicious payloads while evading detection through various techniques.…

Threat Research

Hardening of HardBit

July 12, 2024 Cybereason

Cybereason Security Services issue Threat Analysis reports to inform on impacting threats. The Threat Analysis reports investigate these threats and provide practical recommendations for protecting against them.…

Threat Research

I am Goot (Loader)

June 26, 2024 Cybereason

Cybereason Security Services issues Threat Analysis reports to inform on impacting threats. The Threat Analysis reports investigate these threats and provide practical recommendations for protecting against them.…

Cyber Security News

Can You Bomb a Hacker?

March 20, 2024March 20, 2024 Cybereason

Transcript

When you walk around every day, interact with other people, and do things, there are certain norms of society that you just know to abide by. Like: people should be treated as equals. You have to pay your taxes. Bicyclists don’t ride on the sidewalk, or in the middle of a lane of traffic. …

Threat Research

Beware of the Messengers, Exploiting ActiveMQ Vulnerability

March 13, 2024March 14, 2024 Cybereason

Threat Research

Unboxing Snake – Python Infostealer Lurking Through Messaging Services

March 5, 2024 Cybereason

Threat Research

From Cracked to Hacked: Malware Spread via YouTube Videos

February 12, 2024May 16, 2024 Cybereason

This Threat Analysis Report will delve into compromised YouTube accounts being used as a vector for the spread of malware. It will outline how this attack vector is exploited for low-burn, low-cost campaigns, highlighting strategies used by threat actors and how defenders can detect and prevent these attacks. …

Author: Cybereason