Cybersecurity experts at Sophos X-Ops have uncovered a new social engineering campaign that relies on a tactic dubbed ‘TerminalFix’ to compromise enterprise networks. After Microsoft successfully disrupted fraudulent certificate-signing services earlier this year, threat actors quickly pivoted to alternative methods to infiltrate corporate environments. The latest research details how attackers now deceive users into manually pasting malicious commands into Windows Terminal, triggering a comple
commandandcontrol (4)
Cybersecurity experts at Sophos X-Ops have uncovered a new social engineering campaign that relies on a tactic dubbed ‘TerminalFix’ to compromise enterprise networks. After Microsoft successfully disrupted fraudulent certificate-signing services earlier this year, threat actors quickly pivoted to alternative methods to infiltrate corporate environments. The latest research details how attackers now deceive users into manually pasting malicious commands into Windows Terminal, triggering a comple
Research published by Chainalysis shows that nation-state cyber actors are leading an unprecedented expansion in the use of public distributed ledgers to orchestrate cyberattacks. Analysts recorded a 440% year-on-year surge in what the industry terms "blockchain dead drop" (BDD) techniques. In these schemes, threat actors insert malicious commands and routing instructions straight into public ledger records and automated smart contracts.[1]
Conventional attack infrastructure relies on centraliz
FortiGuard Labs recently captured several malicious samples that were sending malformed DNS queries. After conducting an in-depth analysis, researchers determined that these samples are TrickBot variants that use DNS tunneling to communicate with their command-and-control (C2) servers.
TrickBot is a modular malware family that FortiGuard Labs has repeatedly captured over the past decade. Its modular architecture enables it to extend its capabilities by downloading and executing additional modu
