Hot Topics

Threats and Vulnerabilities

EclecticIQ Retrospective: A Look at the Themes & Events That Shaped the 2023 Cyber Landscape

EclecticIQ Retrospective: A Look at the Themes & Events That Shaped the 2023 Cyber Landscape

| | AI, APT, Cybercriminal, hacktivism, Threats and Vulnerabilities
As the year draws to a close, EclecticIQ’s Intelligence & Research Team looked back on the 2023 cyber landscape: from the evolving tactics of Chinese state-sponsored cyber operations, the increasing integration of ...
EclecticIQ Blog
Navigating Cyber Challenges: Biden's AI Executive Order, Ransomware Attack on German Municipalities

Navigating Cyber Challenges: Biden’s AI Executive Order, Ransomware Attack on German Municipalities

| | AI, Malware, Ransomware, Threat Intelligence, Threats and Vulnerabilities
President Biden Signs Executive Order to Enhance AI Safety And Security in The US    On October 30, 2023, President Biden issued an Executive Order (EO) [] focusing on the safe, secure, ...
EclecticIQ Blog
Flax Typhoon targeting Taiwan, Ransomware Emphasizing Linux-Centric Payloads

Flax Typhoon targeting Taiwan, Ransomware Emphasizing Linux-Centric Payloads

| | Malware, Ransomware, Threat Actor APT, Threat Intelligence, Threats and Vulnerabilities
Flax Typhoon: Microsoft Uncovers Espionage Tactics Targeting Taiwan        Microsoft has detected malicious activities primarily targeting Taiwanese organizations by a nation-state actor named Flax Typhoon, which is believed to be ...
EclecticIQ Blog
FIN8 Group Using Modified Sardonic Malware for Deployment of BlackCat Ransomware

FIN8 Group Using Modified Sardonic Malware for Deployment of BlackCat Ransomware

| | Industry, Malware, Ransomware, Threat Actor APT, Threat Intelligence, Threats and Vulnerabilities
FIN8 Group Using Modified Sardonic Malware for Deployment of BlackCat Ransomware      According to the Symantec Threat Hunter Team, the financially motivated threat actor known as FIN8 has been observed using ...
EclecticIQ Blog
8Base Ransomware Surge; SmugX Targeting European Governments; Russian-Linked DDoS Warning

8Base Ransomware Surge; SmugX Targeting European Governments; Russian-Linked DDoS Warning

| | Industry, Threat Intelligence, Threats and Vulnerabilities
Surge in 8Base Ransomware Operations Raises Questions of Connections to Phobos and RansomHouse     In June 2023, activity related to 8base ransomware operations increased significantly, although the exact reason for this surge ...
EclecticIQ Blog
Creative Ransomware Extortion; Further Malware Capabilities With ChatGPT

Creative Ransomware Extortion; Further Malware Capabilities With ChatGPT

| | ChatGPT, Malware, Ransomware, Threat Intelligence, Threats and Vulnerabilities
The Blackcat-Western Digital Ransomware Cyberattack Serves a Good Example of How Extortion Techniques Will Change Risk And Impact For Targeted Victims Threat actors were able to tap into webcams of employees at ...
EclecticIQ Blog
3CX Incident Attributed to North Korea; New LockBit MacOS Sample

3CX Incident Attributed to North Korea; New LockBit MacOS Sample

| | Cybercriminal, Malware, Ransomware, Threat Intelligence, Threats and Vulnerabilities
Mandiant Attributes 3CX Supply Chain Attack to North Korean Activity Cluster On April 11, 2023, 3CX reported that Mandiant - who investigated the supply chain attack using a digitally signed 3CXDesktopApp installer ...
EclecticIQ Blog
Exposed Web Panel Reveals Gamaredon Group's Automated Spear Phishing Campaigns

Exposed Web Panel Reveals Gamaredon Group’s Automated Spear Phishing Campaigns

| | Cybercriminal, intelligence research, Malware, nation-state, Russia, Threat Actor APT, Threats and Vulnerabilities, Ukraine
Executive Summary On February 09, 2023, EclecticIQ analysts identified a spear phishing campaign targeting Ukrainian government entities like the Foreign Intelligence Service of Ukraine (SZRU) and Security Service of Ukraine (SSU). Analysts ...
EclecticIQ Blog
Dark Pink APT Group Strikes Government Entities in South Asian Countries

Dark Pink APT Group Strikes Government Entities in South Asian Countries

| | intelligence research, Malware, nation-state, Threat Actor APT, Threats and Vulnerabilities, Ukraine
Executive Summary  In February 2023, EclecticIQ researchers identified multiple KamiKakaBot malwares which are very likely used to target government entities in ASEAN (Association of Southeast Asian Nations) countries. The latest attacks, which ...
EclecticIQ Blog
Multi-Year Spearphishing Campaign Targets the Maritime Industry Likely for Financial Gain 

Multi-Year Spearphishing Campaign Targets the Maritime Industry Likely for Financial Gain 

| | Industry, intelligence research, Threat Actor APT, Threats and Vulnerabilities, trojan
Executive summary In May 2020 EclecticIQ Intelligence and Research Team published a report () on phishing lures impersonating the maritime industry. This research offers new insights and update on the topic. The ...
EclecticIQ Blog
Load more