#unc4841 - Twitter Hashtag

about 1 year ago

Missed our recent threat report? 🚨 Salt Typhoon and UNC4841: Silent Push Discovers New Domains; Urges Defenders to Check Telemetry and Log Data Read the full report here: https://t.co/I1aCUX6JQu #UNC4841 #SaltTyphoon #CTI #cybersecurity #threatintel

1

11

3

2

641

Silent Push

@silentpush

about 1 year ago

NEW THREAT REPORT 🚨 Salt Typhoon and UNC4841: Silent Push Discovers New Domains; Urges Defenders to Check Telemetry and Log Data Read the full report here: https://t.co/aXCZ80VeFI #UNC4841 #SaltTyphoon #CTI #cybersecurity #threatintel

1

26

13

2K

キタきつね

@foxbook

over 2 years ago

2023 年度は外部公開アセットの脆弱性悪用が最多～マクニカ「標的型攻撃の実態と対策アプローチ第8版」 #ScanNetSecurity (July 9) #マクニカ #標的型攻撃 #脆弱性 #UNC4841 #製造業セキュリティ https://t.co/kI5e9Au310

0

1

0

1

511

Van @Wanna_VanTa

over 2 years ago

Come see a talk from one of the key drivers of this research. #UNC4841 is noteworthy not only for their crafty exploitation of Barracuda ESGs, but for their ability to quickly adapt to remediation efforts.

Mathew @mittypk

over 2 years ago

This year at @CONFidenceConf I’ll be presenting on UNC4841 with my talk titled "Tales from the Deep". Join me on 27-28 May 2024 in Krakow! Get 15% off your ticket with the discount code: TEAM15 (for individual registrations). https://t.co/y84yV0KAhL

mittypk's tweet photo. This year at @CONFidenceConf I’ll be presenting on UNC4841 with my talk titled "Tales from the Deep". Join me on 27-28 May 2024 in Krakow!
Get 15% off your ticket with the discount code: TEAM15 (for individual registrations).
https://t.co/y84yV0KAhL https://t.co/ZS7GAtgadS

1

17

6

0

16

4

0

3K

Tufail Ahmed @7ufail

over 2 years ago

U don't wanna miss this talk by @mittypk on #UNC4841

⚛️ Marcin Siedlarz @siedlmar

over 2 years ago

A must see this year is a talk by our own @mittypk on Barracuda exploitation campaign by PRC espionage threat group UNC4841. Live only!

0

17

7

1

2K

0

4

1

385

Pierluigi Paganini - Security Affairs @securityaffairs

almost 3 years ago

#Barracuda fixed a new #ESG #zeroday exploited by Chinese group #UNC4841 https://t.co/sEamJSn31t #securityaffairs #hacking @mandiant

0

4

0

480

金丸真弥（Kanamaru Shinya）大紀元 Epoch Times

@kanamaru_shinya

almost 3 years ago

【寄稿】通信障害の背後で暗躍する中共サイバー部隊　日本の経済と国民生活に直接的な影響現代戦争では最前線で銃弾が飛び交う前に、まず「銃後」の国民生活に打撃を加えようとする戦略が実[…] #通信障害 #KDDI #サイバー戦 #サイバー攻撃 #トヨタ #サイバー部隊 #UNC4841 https://t.co/6RleRdesUy

0

28

10

0

2K

Anonymous🐾🐈‍⬛ @YourAnonRiots

about 3 years ago

Suspected Chinese hacking group #UNC4841 exploited zero-day flaw in Barracuda ESG appliances to target government, military, and tech companies. https://t.co/dr5xxLdRDy #cybersecurity #informationsecurity #cyberattack #technology

0

3

4

0

900

Mathew @mittypk

about 3 years ago

@Mandiant Just dropped our deep-dive analysis on the #UNC4841 🇨🇳 global espionage campaign exploiting a 0-day in Barracuda ESG appliances since OCT 2022. We include more information about how #UNC4841 responded to remediation activities https://t.co/w5hqXv5XTy

5

36

21

10

15K

John @Big_Bad_W0lf_

about 3 years ago

Last but not least are #FOXTROT/ #FOXGLOVE. These are the most selectively deployed tools used by #UNC4841, seen only in two cases. FOXTROT and FOXGLOVE are also notable in that they are the only malware families we observed that are not specifically designed for ESGs.

1

6

1

0

324

John @Big_Bad_W0lf_

about 3 years ago

As shown in our previous blog, #UNC4841 is a sophisticated actor that possessed a wide range of tooling specifically designed for Barracuda ESGs. We’ve identified they utilized three primary toolsets for priority targets: SKIPJACK, DEPTHCHARGE, and FOXTROT / FOXGLOVE.

1

7

1

0

2K

John @Big_Bad_W0lf_

about 3 years ago

🧵Excited to share new details on the campaign by #UNC4841 that targeted Barracuda ESGs worldwide with CVE-2023-2868. This blog highlights some of the ways UNC4841 reacted to remediation efforts as well as some of their most selectively deployed tooling. https://t.co/X5AEYpc1G1

3

47

29

6

9K

Tufail Ahmed @7ufail

about 3 years ago

#UNC3886 #UNC4841

Mandiant (part of Google Cloud)

@Mandiant

about 3 years ago

Mandiant Intelligence has been tracking several ways in which Chinese cyber espionage activity has increasingly leveraged initial access and post-compromise strategies intended to minimize opportunities for detection. Learn more in our analysis: https://t.co/fgmN4SSrSp

Mandiant's tweet photo. Mandiant Intelligence has been tracking several ways in which Chinese cyber espionage activity has increasingly leveraged initial access and post-compromise strategies intended to minimize opportunities for detection.

Learn more in our analysis: https://t.co/fgmN4SSrSp https://t.co/cghS1LTrTo

1

291

118

94

95K

1

4

0

1

772

SOCRadar®

@socradar

about 3 years ago

🛑#CISA has issued an alert regarding ongoing cyberattacks by the #APT group #UNC4841, targeting #Barracuda Email Security Gateway (ESG) appliances with a #backdoor named "#Whirlpool." 🔻Access the latest updates on threat actors and #malware: 🔗https://t.co/b07BzxFiMK

socradar's tweet photo. 🛑#CISA has issued an alert regarding ongoing cyberattacks by the #APT group #UNC4841, targeting #Barracuda Email Security Gateway (ESG) appliances with a #backdoor named "#Whirlpool."

🔻Access the latest updates on threat actors and #malware:

🔗https://t.co/b07BzxFiMK https://t.co/sHEEqiuVWC

0

5

3

0

787

Proofpoint

@proofpoint

over 3 years ago

It appears that #UNC4841, a threat actor with ties to the Chinese gov't, was ‘not solely conducting conventional espionage campaigns.' @CRN covers Proofpoint threat research related to the attacks targeting customers of Barracuda’s Email Security Gateway. https://t.co/dCRe2G4BBP

0

6

2

0

568

Threat Insight @threatinsight

over 3 years ago

Finally, in many observed cases from 10/10/22 - 05/29/23 targeted entities confirmed they don't deploy #BarracudaESG in their environment AT ALL. This may suggest a lack of reconnaissance by #UNC4841 prior to phishing. Optimism appears to be a key facet of this TA's playbook. 6/6

0

6

1

2

2K

Threat Insight @threatinsight

over 3 years ago

.#UNC4841 tactics targeted IT & SysAdmins at key academic & government offices dealing with strategic areas of interest to the Chinese state. The end target of the campaign appeared to be the #BarracudaESG cluster which users belonged to rather than the actual email recipient 4/6

1

2

0

1

631

Threat Insight @threatinsight

over 3 years ago

Proofpoint researched CVE-2023-2868 impacting #BarracudaESG appliances following @Mandiant's incredible recent research on #0day exploitation ITW. This 🧵details threat actor #UNC4841's geo targeting, victimology, & strategic areas of focus based on detected phishing emails. 1/6

threatinsight's tweet photo. Proofpoint researched CVE-2023-2868 impacting #BarracudaESG appliances following @Mandiant's incredible recent research on #0day exploitation ITW.

This 🧵details threat actor #UNC4841's geo targeting, victimology, & strategic areas of focus based on detected phishing emails. 1/6 https://t.co/AFQIKr6Urm

1

81

35

12

20K

ET Labs @ET_Labs

over 3 years ago

and as such, an attacker can craft file names that will result in the platform executing them with full system privileges. #Mandiant's report identified an actor they track as #UNC4841 and kindly provided observed domains...

1

0

195

Autumn Good @autumn_good_35

over 3 years ago

IOCには日本のIPもありますね #UNC4841 Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868) Exploited Globally by Aggressive and Skilled Actor, Suspected Links to China https://t.co/cSX5B1hElK

autumn_good_35's tweet photo. IOCには日本のIPもありますね

#UNC4841
Barracuda ESG Zero-Day Vulnerability (CVE-2023-2868) Exploited Globally by Aggressive and Skilled Actor, Suspected Links to China
https://t.co/cSX5B1hElK https://t.co/EzdKYnEKz2

1

3

0

1K

Top Tweets for #unc4841

Last Seen Hashtags on Sotwe

Trends for you

Most Popular Users