Blog Articles 2023

2023 42

• [Research Summary]: APT34’s New Backdoor – SideTwist Variant APT34 (OilRig) has a new SideTwist variant. See how the 2023 samples differ from the 2021 backdoor, how phishing delivers them and how to defend.
• The Evolution of Cybersecurity: Emerging Trends in 2024 This article delves into these evolving cybersecurity trends, offering insights and strategies to navigate this ever-changing domain.
• The Anatomy of Cyber Espionage: Tactics, Techniques, and Prevention Cyber espionage explained: the tactics and techniques used to steal secrets, the risks to national security and companies, and practical prevention steps.
• The Rise of Ransomware-as-a-Service (RaaS): Understanding the Threat RaaS lets developers rent out ransomware while affiliates run the attacks and share the profits. Learn how the model works and how to reduce the risk.
• Advanced Persistent Threats (APTs): Identifying and Combating Stealth Attacks Learn what an APT (advanced persistent threat) is, which warning signs to look for in traffic, data access, software and logs, and how to defend a network.
• [Research Summary]: Cylance Ransomware Cylance ransomware technical analysis: how this Linux ELF ransomware may enter through unpatched services, misconfigurations and stolen credentials.
• [Research Summary]: Mystic Stealer Mystic Stealer is a stealer malware that first surfaced in April 2023. See what it steals, how it is sold as a service, and its MITRE ATT&CK mapping.
• [Research Summary]: Snatch Ransomware Snatch ransomware reboots into Safe Mode to bypass default safeguards, then encrypts files. See how it works, its sample hashes and MITRE ATT&CK mapping.
• Cyber Hygiene Practices: Essential Steps for Online Safety Cyber hygiene is the set of routine habits that protect your devices and accounts. Learn the key steps: updates, passwords, MFA, backups and phishing.
• Understanding Cybersecurity Compliance: A Guide for Businesses in 2024 Cybersecurity compliance explained: how GDPR, CCPA, PCI DSS and HIPAA differ, and the steps to build and keep a compliance program for your business.
• Mitigating Insider Threats: Strategies for Protecting Your Organization Insider threats come from people with authorized access. Learn the main types, how to detect them and the steps that help reduce the risk for your team.
• Echida Stealer Technical Analysis Echida Stealer is a C# malware that steals data and takes remote commands. This Threat Intelligence post covers its capabilities, C2 and MITRE ATT&CK map.
• Brandefense’s Perspective on Understanding APT: Decoding the Tactics of APT Groups Learn how APT groups break in, stay hidden and steal data, how they differ from common cyber attacks, and which steps help defend against them.
• Blended Attacks: When Cybercriminals Use Multiple Techniques Blended attacks combine phishing, malware, software flaws and remote control in one intrusion. See how they work and how to reduce the risk.
• Insider Threats: Identifying and Mitigating Risks from Within Insider threats originate from individuals within your organization, ranging from accidental data breaches to malicious actions.
• Phishing in the Age of Social Engineering: Advanced Scam Tactics Phishing has moved beyond typo-filled emails. See how spear phishing, whaling, BEC, vishing and smishing work, and how training, MFA and filtering help.
• Protecting Intellectual Property: Strategies for a Secure Digital Environment Learn what intellectual property is and how to protect it online: trademarks, copyright, patents and trade secrets, plus practical steps for businesses.
• Identifying Fake Social Media Profiles: A Guide for Brand Managers The prevalence of fake social media profiles has emerged as a concern for managers. These deceptive accounts can inflict serious damage on a brand's reputation.
• The Psychology Behind Cyberattacks: What Motivates Hackers? The psychology behind cyberattacks: the motivations that drive hackers to breach systems and steal data, and what that means for defending organizations.
• [Research Summary]: Stop/Djvu Ransomware Stop/Djvu ransomware analysis: how it encrypts files, marks them with varied extensions, drops _readme.txt ransom notes, and a report you can download.
• Ransomware Attacks on Critical Infrastructure: Are We Doing Enough? Ransomware attacks on critical infrastructure can halt hospitals, energy and transport. See what is at risk and the layered defenses that help.
• What is External Attack Surface Management? External Attack Surface Management (EASM) is designed to proactively identify, assess, and protect all public-facing digital assets an organization owns.
• The Impact of Machine Learning on Enhancing Threat Detection Every single day, companies find themselves targeted by cyberattacks. Machine Learning has arisen as a transformative force in the arena of threat detection.
• The Future of AI in Cybersecurity: Benefits and Risks Hackers, cyber criminals, and data thieves are always looking for new ways to exploit businesses and steal sensitive information.
• What is Supply Chain Security? Supply chain security protects how software is built, tested and delivered. Learn the key practices, the top five threats and why it matters to business.
• Godfather Android Banking Trojan Technical Analysis Godfather is an Android banking trojan that logs keystrokes and abuses accessibility rights to steal financial data. See the analysis and its C2 method.
• Stealc Malware Technical Analysis Report Stealc technical analysis: how this infostealer is packed, how it avoids analysis, talks to its command server and which browsers and wallets it targets.
• Poseidon Malware in APT36 Campaigns: Technical Analysis Poseidon is a Go backdoor used by APT 36 against Indian government staff. See the infection chain, C2 behavior, indicators and a YARA rule.
• Cybersecurity Trends in 2023: What You Need to Know For the cybersecurity trends in 2023, we expect to see a rise in cyber-attacks in frequency and sophistication.
• The Role of Brandefense in Your Comprehensive Cybersecurity Strategy in 2023 See how Brandefense digital risk protection fits a comprehensive cybersecurity strategy: brand abuse, phishing, dark web, attack surface and vulnerabilities.
• What is BEC Attack and How to Prevent against it in 2023? A BEC attack uses fraudulent email to trick staff into sending money or data. Learn the types, warning signs and how to prevent business email compromise.
• What Is Smishing and How To Protect Yourself? Smishing is phishing by text message. Learn how smishing attacks work, common examples, phone settings that help and steps to protect yourself.
• What is Incident Response and How to Build It? Learn what incident response is, its six stages from preparation to lessons learned, the tools teams use, and how to build a plan for your organization.
• How to Access the Dark Web Safely and Is It Legal? How to access the dark web with Tor Browser, whether it is illegal in most countries, and the habits that keep you safe from malware and scams.
• Women in cybersecurity bring new perspectives to the industry! Women in cybersecurity- Interview with our cyber intelligence analysts. Our female cyber intelligence analysts answered our questions.
• What is Data Leak and How Can Data Leaks Be Prevented? A data leak is the unauthorized sharing of sensitive information. Learn the causes, how it differs from a data breach and how to prevent data leaks.
• Comparing Cyber Security Attacks in Q3 – Q4 of 2022 for the Manufacturing Sector Compare ransomware attacks on the manufacturing sector in Q3 and Q4 of 2022, see why factories are targeted, and learn practical steps to reduce risk.
• Ransomware 101 Ransomware attacks have become increasingly common and can be devastating for individuals and organizations. Learn how they work and how to prevent them.
• Cyber Threats to the Qatar World Cup 2022 | Brandefense The Qatar World Cup 2022 drew cyber threat actors. See the fake tickets, phishing pages, fake apps and malware that targeted fans, with examples.
• Vulnerability and Malware Trends of 2022 It is becoming more challenging to ensure the security of our systems and protect our data with the continuous increase of advanced malware.
• What is Fileless Malware And How Does It Work? Fileless malware is not just a specific kind of malware. It has various initial access techniques, various persistence techniques, and various goals.
• Linux CLI Utility Tools Since it is harder to use Linux CLI than to use GUI, people may ask or complain about why Linux CLI exists, and some people recommend using it.

Browse by Category 7

The category pages below collect related articles, newest first.

• Blog: Digital Risk Protection Digital risk protection articles on brand impersonation, phishing, fake domains, data leaks and fraud, and how to detect and remove them early.
• Blog: Fraud Articles on online fraud: phishing, fake websites and apps, stolen card data and account takeover, with advice on spotting and stopping it.
• Blog: Ransomware Ransomware research: active groups, leak-site activity, attack methods and trends, and practical steps to cut your exposure and plan a response.
• Blog: Dark Web Dark web research: leaked credentials, data sales, underground forums and cybercrime markets, and what each one means for your organization.
• Blog: APT Groups Profiles of APT groups and state-linked threat actors: who they target, the tools and techniques they use, and how to defend against them.
• Blog: Sector Analysis Sector-by-sector analysis of cyber threats: how attackers target finance, healthcare, retail, energy and other industries, and what teams can do.
• Blog: VIP Security VIP and executive protection: impersonation, doxxing, leaked personal data and fake profiles, and how to monitor and reduce risk for key people.