Emulating the Constantly Evolving Cybercrime Malware QakBot

AttackIQ has released three new attack graphs that emulate multiple infection chain variations involving the widely utilized cybercrime malware known as QakBot.

Authors: Francis Guibernau Ken Towne Read More
Emulating the Highly Sophisticated North Korean Adversary Lazarus Group
Adversary Emulation

Emulating the Highly Sophisticated North Korean Adversary Lazarus Group

AttackIQ has released a bundle of content consisting of six new attack graphs that seek to emulate the campaigns and operations led by the infamous North Korean-sponsored adversary Lazarus Group against entities worldwide across multiple sectors.
Read More
Emulating the Politically Motivated North Korean Adversary Andariel
Adversary Emulation

Emulating the Politically Motivated North Korean Adversary Andariel

AttackIQ has released a bundle of content that includes three new attack graphs that seek to emulate different cyberspace operations led by the North Korean-sponsored threat actor Andariel against multiple entities located in Asia, predominantly in South Korea, through the use of downloaders, backdoors, and custom ransomware.
Read More
Attack Graph Response to APT36 Targeted Attacks Against Indian Governmental Organizations
Adversary Emulation

Attack Graph Response to APT36 Targeted Attacks Against Indian Governmental Organizations

AttackIQ has released a new attack graph that seeks to emulate the activity carried out by the politically motivated Pakistan-based adversary known as APT36 or Transparent Tribe. This newly released attack graph emulates the behaviors observed in attacks against victims working in Indian government organizations.
Read More

Most Recent

Is Your Healthcare Organization Following These Four Ransomware Best Practices?
Cybersecurity

Is Your Healthcare Organization Following These Four Ransomware Best Practices?
Healthcare is the most targeted sector for data breaches, and ransomware attacks were responsible for almost 50 percent of all healthcare data breaches in 2020. How should healthcare companies proceed? Our guest blogger in this ransomware series is Tracy Cohen, a cybersecurity expert with over a decade of experience managing cybersecurity risk in the healthcare and biopharma sector. She is also a licensed skydiver,
Read More
The Kaseya VSA REvil Ransomware Supply Chain Attack: How It Happened, How It Could Have Been Avoided
Ransomware

The Kaseya VSA REvil Ransomware Supply Chain Attack: How It Happened, How It Could Have Been Avoided
On July 2, 2021, the REvil ransomware group successfully exploited a zero-day vulnerability in the on-premise Kaseya VSA server, enabling a wide-scale supply chain cyber attack. Let’s dig in and see how the attack happened, how attack emulation could have helped, and what you can do to implement a threat-informed defense strategy to prepare yourself for similar threat actor behavior.
Read More