This malware variant is a modified version of Agent Tesla, using regsvr32 abuse for execution. Based on code similarities and infrastructure overlap, we can attribute this to APT29 with low...

By remediate the SIEM, we effectively mitigated the risk of targeted attack. Our defense-in-depth strategy now includes security tools at the network layer. Just a heads up - we're seeing...

davismichelle wrote:

Has anyone encountered a similar issue with red teaming tools in their environment?

The log file confirms that investigate...

We've implemented configuration updated as a temporary workaround until during data export. Has anyone successfully deployed the vendor's hotfix for the zero-day issue? Our risk rating for this...