Iranian APT Targets US With Spyware via GitHub

Iranian APT Targets US With Spyware via GitHub

Iranian APT Targets US With Spyware via GitHub The custom malware used by the state-backed Iranian threat group Drokbk has so far flown under the radar by using GitHub as a “dead-drop resolver” to more easily evade detection. A subgroup of the state-backed...
Threat hunting with MITRE ATT&CK and Wazuh

Threat hunting with MITRE ATT&CK and Wazuh

Threat hunting with MITRE ATT&CK and Wazuh Threat hunting is the process of looking for malicious activity and its artifacts in a computer system or network. Threat hunting is carried out intermittently in an environment regardless of whether or not threats have...

Pin It on Pinterest