Category: Articles

Silent Librarian APT right on schedule for 20/21 academic year

~ Dade Murphy ~ Leave a comment

Malwarebytes Labs-- A threat actor known as Silent Librarian/TA407/COBALT DICKENS has been actively targeting universities via spear phishing campaigns since schools and universities went back. We were initially tipped off by one of our customers, and were able to identify a new active campaign from this APT group. Based off a number of intended victims, … Continue reading Silent Librarian APT right on schedule for 20/21 academic year

FIN11 Hackers Spotted Using New Techniques In Ransomware Attacks

~ Dade Murphy ~ Leave a comment

The Hacker News-- A financially-motivated threat actor known for its malware distribution campaigns has evolved its tactics to focus on ransomware and extortion. According to FireEye's Mandiant threat intelligence team, the collective — known as FIN11 — has engaged in a pattern of cybercrime campaigns at least since 2016 that involves monetizing their access to … Continue reading FIN11 Hackers Spotted Using New Techniques In Ransomware Attacks

Guide: Scale or Fail — Why MSSPs Need Multitenant Security Solutions

~ Dade Murphy ~ Leave a comment

The Hacker News-- Managed Security Services Providers (MSSPs) have it rough. They have the burden of protecting their client organizations from cyberattacks, with clients from different industries, different security stacks, and different support requirements. And everything is in a constant state of flux. MSSPs are turning to multitenant solutions to help reduce the complexity of … Continue reading Guide: Scale or Fail — Why MSSPs Need Multitenant Security Solutions

Microsoft Releases Patches For Critical Windows TCP/IP and Other Bugs

~ Dade Murphy ~ Leave a comment

The Hacker News-- Microsoft on Tuesday issued fixes for 87 newly discovered security vulnerabilities as part of its October 2020 Patch Tuesday, including two critical remote code execution (RCE) flaws in Windows TCP/IP stack and Microsoft Outlook. The flaws, 11 of which are categorized as Critical, 75 are ranked Important, and one is classified Moderate in … Continue reading Microsoft Releases Patches For Critical Windows TCP/IP and Other Bugs

TryHackMe- LazyAdmin CTF Writeup (Detailed)

~ Dade Murphy ~ Leave a comment

InfoSec Write-ups - Medium-- CTF Writeup #3Welcome Folks!We are going to LazyAdmin CTF on TryHackMe. I hope you will like the writeup. There are 2 ways we will get root. Read along you’ll find them near the end.TryHackMe | LazyAdminLet’s dive in!! Enjoy the flow!!Deploy the machine.In the meantime when you are waiting for machine to be deployed, … Continue reading TryHackMe- LazyAdmin CTF Writeup (Detailed)

Recipe for a successful phishing campaign (part 1/2)

~ Dade Murphy ~ Leave a comment

InfoSec Write-ups - Medium-- IntroductionPhishing attacks are great first-entry vectors with technical details which are frequently overlooked by both white and blackhat hackers.Having participated in multiple phishing campaigns over the years, both in offensive as well as defensive teams, I’ve learned from trial and error a lot of these things to pay attention to. This article … Continue reading Recipe for a successful phishing campaign (part 1/2)