Threat Intelligence Blog

Threatintelligence dot blog.
Home of @PRODAFT and @invictus_cyber Threat Intelligence Teams.
New Articles are announced here.
Tweets are mostly in EN.

[PRODAFT @PRODAFT]

[1] Our TI team identified few servers linked to the #Solarwinds #Fireeye breach, sending out emails including sophisticated device fingerprinting and browser based redirections. Currently the campaign is targeting comcast / xfinity and https://t.co/Aj5cJ8r62Z users #SUNBURST.

[Threat Intelligence Blog @threatintelblog]

The second part of our Article Series: "OpBlueRaven: Unveiling Fin7/Carbanak" has just been published! In the second article; we are deailing with BadUSB attacks carried out by these threat actors!
https://t.co/eftajqcfzb

[Threat Intelligence Blog @threatintelblog]

We appreciate everyone's interest in our blog! We're preparing part 2 and 3 of our OpBlueRaven article series simultaneously. Still trying to reach the victims before disclosure. These parts are due in two weeks. Keep following ThreatIntel[DOT]Blog.
#opBlueRaven #threatintel

[Threat Intelligence Blog @threatintelblog]

Our first Article is titled:
"OpBlueRaven: Unveiling Carbanak and Fin7". In the first chapter of the series, we're dealing with the neverbeforeseen Tirion Loader. Exciting Stuff! Stay tuned.
https://t.co/uvNZ8EoE4o

[Threat Intelligence Blog @threatintelblog]

Hello World!