Chinese Threat Actors Targeting Europe in SmugX Campaign - Check Point Research
Introduction In the last couple of months, Check Point Research (CPR) has been tracking the activity of a Chinese threat actor targeting Foreign Affairs ministries and embassies in Europe. Combined with other Chinese activity previously reported by Check Point Research, this represents a larger trend within the Chinese ecosystem, pointing to a shift to targeting European entities, with a focus on
The Dragon Who Sold His Camaro: Analyzing Custom Router Implant - Check Point Research
The Dragon Who Sold His Camaro: Analyzing Custom Router Implant Research by: Itay Cohen, Radoslaw Madej, and the Threat Intelligence Team Over the past few months, Check Point Research has closely monitored a series of targeted attacks aimed at European foreign affairs entities. These campaigns have been linked to a Chinese state-sponsored APT group we track as Camaro Dragon, which shares similari
IndigoZebra APT continues to attack Central Asia with evolving tools - Check Point Research
IndigoZebra APT continues to attack Central Asia with evolving tools Introduction Check Point research recently discovered an ongoing spear-phishing campaign targeting the Afghan government. Further investigation revealed this campaign was a part of a long-running activity targeting other Central-Asia countries, including Kyrgyzstan and Uzbekistan, since at least 2014. The actor suspected of this
SharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor - Check Point Research
SharpPanda: Chinese APT Group Targets Southeast Asian Government With Previously Unknown Backdoor Introduction Check Point Research identified an ongoing surveillance operation targeting a Southeast Asian government. The attackers use spear-phishing to gain initial access and leverage old Microsoft Office vulnerabilities together with the chain of in-memory loaders to attempt and install a previou
Playing in the (Windows) Sandbox - Check Point Research
Research By: Alex Ilgayev Introduction Two years ago, Microsoft released a new feature as a part of the Insiders build 18305 – Windows Sandbox. This sandbox has some useful specifications: Integrated part of Windows 10 (Pro/Enterprise). Runs on top of Hyper-V virtualization. Pristine and disposable – Starts clean on each run and has no persistent state. Configurable through a configuration file th
The Story of Jian - How APT31 Stole and Used an Unknown Equation Group 0-Day - Check Point Research
The Story of Jian – How APT31 Stole and Used an Unknown Equation Group 0-Day Research by: Eyal Itkin and Itay Cohen There is a theory which states that if anyone will ever manage to steal and use nation-grade cyber tools, any network would become untrusted, and the world would become a very dangerous place to live in. There is another theory which states that this has already happened. What would
TikTok fixes privacy issue discovered by Check Point Research - Check Point Research
TikTok fixes privacy issue discovered by Check Point Research Research by Eran Vaknin, Alon Boxiner In January 2020, we have published a research on TikTok, reporting we have found that a threat actor could reveal personal information saved on the account and take actions on behalf of a victim, manipulating the victim’s account content. That issue was responsibly resolved by TikTok prior to the re
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Eastern Asian Android Assault - FluHorse - Check Point Research
Chinese actor takes aim, armed with Nim Language and Bizarro AES - Check Point Research
APT35 exploits Log4j vulnerability to distribute new modular PowerShell toolkit - Check Point Research
Smishing Botnets Going Viral in Iran - Check Point Research
Hacking a Kindle - Check Point Research
Mobile app developers’ misconfiguration of third party services leave personal data of over 100 million exposed - Check Point Research
Security probe of Qualcomm MSM data services - Check Point Research
Iran’s APT34 Returns with an Updated Arsenal - Check Point Research
Deep into the SunBurst Attack - Check Point Research
FreakOut – Leveraging Newest Vulnerabilities for creating a Botnet - Check Point Research
SUNBURST, TEARDROP and the NetSec New Normal - Check Point Research
Enter WAPDropper – An Android Malware Subscribing Victims To Premium Services By Telecom Companies - Check Point Research
INJ3CTOR3 Operation – Leveraging Asterisk Servers for Monetization - Check Point Research