Category: Uncategorized
-
SOC news | Jan 03 – Kasseika ransomware uses BYOVD in his TTP
Kasseika Threat Actor has joined the club of Threat Actors that currently use Bring Your Own Vulnerable Driver (BYOVD) tactics to disable antivirus/EDR software before doing malicious activities, such as files encryptions. Kasseika abuse the Martini driver, part of TG Soft’s VirIT Agent System. By using BYOVD attacks, the malware gains the privileges to terminate various processes,…
-
SOC news | Jan 02 – Kasseika ransomware uses BYOVD in his TTP
Kasseika Threat Actor has joined the club of Threat Actors that currently use Bring Your Own Vulnerable Driver (BYOVD) tactics to disable antivirus/EDR software before doing malicious activities, such as files encryptions. Kasseika abuse the Martini driver, part of TG Soft’s VirIT Agent System. By using BYOVD attacks, the malware gains the privileges to terminate various processes,…
-
SOC news | Jan 01 – Kasseika ransomware uses BYOVD in his TTP
A Security Operation Center (SOC) is a service where the customer is an active participant. Establishing a good relationship with the customer is an important requirement for handling security incidents more efficiently. Our SOC analysts produce and deliver several reports, most of them on a monthly basis. They are usually presented to clients during a…
-
Hello world!
Welcome to WordPress. This is your first post. Edit or delete it, then start writing! Lorem Ipsum è un testo segnaposto utilizzato nel settore della tipografia e della stampa. Lorem Ipsum è considerato il testo segnaposto standard sin dal sedicesimo secolo, quando un anonimo tipografo prese una cassetta di caratteri e li assemblò per preparare un…