Security Vulnerabilities in Cellebrite
April 27 2021Moxie Marlinspike has an intriguing blog post about Cellebrite, a tool used by police and others to break into smartphones. Moxie got his hands on one of...
Read moreNew SUNSHUTTLE Second-Stage Backdoor Uncovered Targeting U.S.-Based Entity; Possible Connection to UNC2452
March 4 2021Executive Summary In August 2020, a U.S.-based entity uploaded a new backdoor that we have named SUNSHUTTLE to a public malware repository. ...
Read moreNew SUNSHUTTLE Second-Stage Backdoor Uncovered Targeting U.S.-Based Entity; Possible Connection to UNC2452
March 4 2021Executive Summary In August 2020, a U.S.-based entity uploaded a new backdoor that we have named SUNSHUTTLE to a public malware repository. ...
Read moreChinese Supply-Chain Attack on Computer Systems
February 13 2021Bloomberg News has a major story about the Chinese hacking computer motherboards made by Supermicro, Levono, and others. It’s been going on since at least 2008. The US...
Read moreLatest on the SVR’s SolarWinds Hack
January 5 2021The New York Times has an in-depth article on the latest information about the SolarWinds hack (not a great name, since it’s much more far-reaching than that).
Interviews with...
Read more
How China Uses Stolen US Personnel Data
December 24 2020Interesting analysis of China’s efforts to identify US spies:
By about 2010, two former CIA officials recalled, the Chinese security services had instituted a sophisticated travel intelligence program, developing...
Read more
A 2021 intelligence funding draft bill mandates a report on surveillance vendors and which countries or other actors are using spyware.
Read moreGoogle's threat analysts have identified state-level attacks from China. I hope both campaigns are working under the assumption that everything they say and do will be dumped on the...
Read moreAnalyzing Dark Crystal RAT, a C# Backdoor
May 12 2020The FireEye Mandiant Threat Intelligence Team helps protect our customers by tracking cyber attackers and the malware they use. The FLARE Team helps augment...
Read moreAnalyzing Dark Crystal RAT, a C# Backdoor
May 12 2020The FireEye Mandiant Threat Intelligence Team helps protect our customers by tracking cyber attackers and the malware they use. The FLARE Team helps augment...
Read more
Recent Comments