RnD Research Lab

Ease the Burden with AI-Driven Threat Intelligence Reporting

Learn about critical threats that can impact your organization and the bad actors behind them from Cybersixgill's threat experts. Each story shines a light on underground activities, the threat actors involved, and why you should care, along with what you can do to mitigate risk. 
Cybersecurity professionals are facing unprecedented challenges as they strive to manage increasing workloads

Source: Ease the Burden with AI-Driven Threat Intelligence Reporting

RedJuliett Cyber Espionage Campaign Hits 75 Taiwanese Organizations

A likely China-linked state-sponsored threat actor has been linked to a cyber espionage campaign targeting government, academic, technology, and diplomatic organizations in Taiwan between November 2023 and April 2024.
Recorded Future's Insikt Group is tracking the activity under the name RedJuliett, describing it as a cluster that operates Fuzhou, China, to support Beijing's intelligence

Source: RedJuliett Cyber Espionage Campaign Hits 75 Taiwanese Organizations

ISC Stormcast For Monday, June 24th, 2024 https://isc.sans.edu/podcastdetail/9032, (Mon, Jun 24th)

(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.

Source: ISC Stormcast For Monday, June 24th, 2024 https://isc.sans.edu/podcastdetail/9032, (Mon, Jun 24th)

Change Healthcare lists the medical data stolen in ransomware attack

UnitedHealth has confirmed for the first time what types of medical and patient data were stolen in the massive Change Healthcare ransomware attack, stating that data breach notifications will be mailed in July. [...]

Source: Change Healthcare lists the medical data stolen in ransomware attack

Multiple Threat Actors Deploying Open-Source Rafel RAT to Target Android Devices

Multiple threat actors, including cyber espionage groups, are employing an open-source Android remote administration tool called Rafel RAT to meet their operational objectives by masquerading it as Instagram, WhatsApp, and various e-commerce and antivirus apps.
"It provides malicious actors with a powerful toolkit for remote administration and control, enabling a range of malicious activities

Source: Multiple Threat Actors Deploying Open-Source Rafel RAT to Target Android Devices

Five men convicted for operating illegal streaming site Jetflicks

A federal jury in Las Vegas convicted five men for their involvement in the operation of Jetflicks, one of the largest and most popular illegal streaming services in the United States. [...]

Source: Five men convicted for operating illegal streaming site Jetflicks

Tor Browser 13.5 brings Android enhancements, better bridge management

The Tor Project has released Tor Browser 13.5, bringing several improvements and enhancements for Android and desktop versions. [...]

Source: Tor Browser 13.5 brings Android enhancements, better bridge management

CDK warns: threat actors are calling customers, posing as support

CDK Global has cautioned customers about unscrupulous actors calling them and posing as CDK agents or affiliates to gain unauthorized systems access. The warning follows ongoing cyberattacks that have hit CDK, a software-as-a-service (SaaS) platform that thousands of US car dealerships rely upon. [...]

Source: CDK warns: threat actors are calling customers, posing as support

Biden bans Kaspersky antivirus software in US over security concerns

Today, the Biden administration has announced an upcoming ban of Kaspersky antivirus software and the pushing of software updates to US companies and consumers, giving customers until September 29, 2024, to find alternative security software. [...]

Source: Biden bans Kaspersky antivirus software in US over security concerns

Infocon: green

Sysinternals' Process Monitor Version 4 Released

Source: Infocon: green