Mandiant Threat Intelligence recently promoted a threat cluster to a named FIN (or financially motivated) threat group for the first time since 2017. We have detailed FIN11's various...
Read moreDetecting Microsoft 365 and Azure Active Directory Backdoors
September 30 2020Mandiant has seen an uptick in incidents involving Microsoft 365 (M365) and Azure Active Directory (Azure AD). Most of these incidents are the result of a phishing...
Read moreFuzzing Image Parsing in Windows, Part One: Color Profiles
September 24 2020Image parsing and rendering are basic features of any modern operating system (OS). Image parsing is an easily accessible attack surface, and a vulnerability that may lead to...
Read moreMany organizations operating in e-commerce, hospitality, healthcare, managed services, and other service industries rely on web applications. And buried within the application logs may be the ...
Read moreEmulation of Malicious Shellcode With Speakeasy
August 26 2020In order to enable emulation of malware samples at scale, we have developed the Speakeasy emulation framework. Speakeasy aims to make it as easy as ...
Read moreOperational technology (OT) asset owners have historically considered red teaming of OT and industrial control system (ICS) networks to be too risky due to the potential for...
Read moreCOOKIEJAR: Tracking Adversaries With FireEye Endpoint Security’s Logon Tracker Module
August 11 2020During a recent investigation at a telecommunications company led by Mandiant Managed Defense, our team was tasked with rapidly identifying systems that...
Read moreCOOKIEJAR: Tracking Adversaries With FireEye Endpoint Security’s Logon Tracker Module
August 11 2020During a recent investigation at a telecommunications company led by Mandiant Managed Defense, our team was tasked with rapidly identifying systems that...
Read moreThe FireEye Front Line Applied Research & Expertise (FLARE) Team attempts to always stay on top of the most current and emerging threats. As a member of...
Read moreThe FireEye Front Line Applied Research & Expertise (FLARE) Team attempts to always stay on top of the most current and emerging threats. As a member of...
Read more
Recent Comments