Sign In

Mark Stevens

Highlights

Aug 30 · linkedin

The Hacker News wrote about the latest SLOW#TEMPEST campaign uncovered by our Threat Research Team. This sophisticated attack targeting Chinese-speaking users involves the distribution of malicious ZIP files designed to deploy Cobalt Strike implants on targeted systems.

"The attackers managed to move laterally, establish persistence and remain undetected within the systems for more than two weeks," Securonix researchers Den Iuzvyk and Tim Peck said in a new report.

📰 Read the full news article: https://lnkd.in/g8mDh4vd

🔎 For more details on this campaign, including detection strategies and hunting queries, read the full advisory: https://lnkd.in/gTXZApqb

Stay vigilant!

#Cybersecurity #ThreatResearch #TDIR #China #Phishing #ThreatLabs

Aug 29 · linkedin

🚨 New Securonix Threat Research Security Advisory 🚨 Our Threat Research team has uncovered a sophisticated attack targeting Chinese-speaking users. The SLOW#TEMPEST campaign involves the distribution of malicious ZIP files designed to deploy Cobalt Strike implants on targeted systems. These attackers have remained undetected for over two weeks, successfully escalating privileges, moving laterally, and establishing persistence within the compromised environment.

Key Findings:

🎯 Target: Chinese users with evidence suggesting phishing emails as the likely vector

🛠️ Tactics: DLL hijacking, privilege escalation, and the use of tools like BloodHound for AD reconnaissance

⏱️ Persistence: The attackers used scheduled tasks and elevated user privileges to maintain control

🧱 Infrastructure: Command and control servers were hosted in China

Recommendations:

🚫 Avoid downloading unsolicited attachments 🗂️ Monitor common malware staging directories 🖥️ Deploy robust endpoint logging capabilities

For more details on this campaign, including detection strategies and hunting queries, read the full advisory: https://lnkd.in/gTXZApqb

Stay vigilant!

#Cybersecurity #ThreatResearch #TDIR #China #Phishing #ThreatLabs

Related Questions

What are Mark Stevens' key achievements at Ivanti?
How does Mark Stevens plan to grow Securonix's partner ecosystem?
What strategies does Mark Stevens use to build successful alliances?
How has Mark Stevens' experience at Lumension Security influenced his approach at Securonix?
What are the main goals for Securonix's channel program under Mark Stevens?
Mark Stevens
Add to my network