adversary emulation

Emulating the Unyielding Scattered Spider

| | adversary emulation, financial, Malware, retail, scattered spider, technology, telecommunications
AttackIQ has released a new assessment template that contains a curated list of Tools and Malware samples associated with Scattered Spider to help defenders improve their security posture against this sophisticated and ...
AttackIQ

Emulating the Blazing DragonForce Ransomware

| | adversary emulation, Broad-Based Attacks, DragonForce, Lockbit, Mimikatz, Ransomware, ransomware as a service
AttackIQ has released two new attack graphs that emulate the behaviors exhibited by DragonForce ransomware since its emergence in August 2023. Initially based entirely on the leaked LockBit 3.0 (Black) builder, it ...
AttackIQ

Response to CISA Advisory (AA25-141B): Threat Actors Deploy LummaC2 Malware to Exfiltrate Sensitive Data from Organizations

| | adversary emulation, Broad-Based Attacks, cisa, CISA Advisory, Lumma Stealer, LummaC2
AttackIQ has updated an existing assessment template in response to the CISA Advisory (AA25-141B) published on May 21, 2025, which disseminates Tactics, Techniques and Procedures (TTPs) and Indicators of Compromise (IOCs), associated ...
AttackIQ

Response to CISA Advisory (AA25-141A): Russian GRU Targeting Western Logistics Entities and Technology Companies

| | adversary emulation, APT28, cisa, CISA Advisory, credential harvesting, Fancy Bear, government, GRU, Russia, spear-phishing, technology, transportation
AttackIQ has released a new assessment template in response to the CISA Advisory (AA25-141A) published on May 21, 2025. The CSA highlights a cyber espionage-oriented campaign carried out by cyber actors affiliated ...
AttackIQ

Emulating the Terrorizing VanHelsing Ransomware

| | adversary emulation, Broad-Based Attacks, RaaS, Ransomware, ransomware as a service
AttackIQ has released a new attack graph emulating the behaviors exhibited by VanHelsing ransomware, a new and rapidly growing ransomware-as-a-service (RaaS) affiliate program that emerged in March 2025. This emulation enables defenders ...
AttackIQ

Emulating the Infestive Termite Ransomware

| | adversary emulation, Babuk, Broad-Based Attacks, Ransomware, Termite
AttackIQ has released a new attack graph emulating the behaviors exhibited by Termite ransomware since its emergence in November 2024. Termite is widely believed to be based on Babuk Ransomware, a defunct ...
AttackIQ

Emulating the Hellish Helldown Ransomware

| | adversary emulation, Broad-Based Attacks, Helldown, Ransomware, Windows
AttackIQ has released a new attack graph emulating the behaviors exhibited by Helldown ransomware since its emergence in August 2024. Helldown is operated by the eponymous and still largely undocumented adversary, which ...
AttackIQ

Emulating the Stealthy StrelaStealer Malware

| | adversary emulation, Broad-Based Attacks, HIVE-0145, Malware, StrelaStealer
AttackIQ has released three new attack graphs designed to emulate the Tactics, Techniques, and Procedures (TTPs) associated with StrelaStealer observed in its most recent activities, enabling defenders to test and validate their ...
AttackIQ

Emulating the Misleading CatB Ransomware

| | adversary emulation, Broad-Based Attacks, CatB, Malware
AttackIQ has released a new attack graph designed to emulate the Tactics, Techniques, and Procedures (TTPs) associated with CatB ransomware observed in its most recent activities, enabling defenders to test and validate ...
AttackIQ

Response to CISA Advisory (AA25-093A): Fast Flux: A National Security Threat

| | adversary emulation, CISA Advisory, CISA Alert, fast flux
AttackIQ recommends that customers take the following testing actions in alignment with the recently published CISA Advisory (AA25-093A) which highlights the ongoing and evolving threat of fast flux techniques. These techniques are ...
AttackIQ
Load more