DigiByte Security

07/27/2023

This article was published in May of this year, but it's new to me. Sharing for expanded awareness as it covers many topics beneficial to DFIR and cybersecurity.

👉 Volt Typhoon is categorized as a state-sponsored actor based in China that typically focuses on espionage and information gathering.

👉 Threat actor puts strong emphasis on stealth in this campaign, relying almost exclusively on living-off-the-land techniques and hands-on-keyboard activity.

👉 Volt Typhoon has been active since mid-2021 and has targeted critical infrastructure organizations.

👉 National Security Agency (NSA) has also published a Cybersecurity Advisory - hyperlink to PDF is contained in the article.

Chinese state-sponsored actor Volt Typhoon is using stealthy techniques to target US critical infrastructure, conduct espionage, and dwell in compromised environments.

06/24/2021

https://www-cybcube-com.cdn.ampproject.org/c/s/www.cybcube.com/news/ransomware-cartels-using-new-tactics-to-extort-money?hs_amp=true

Gangs of cyber criminals, organising themselves along the lines of drug cartels, are changing the ‘rules’ of ransomware attacks to keep ahead of the authorities’ efforts to thwart their activities. That’s the conclusion of a new report by leading cyber analytics expert CyberCube.

05/20/2021

free cyber resources from around the internet

04/04/2021

Insurance giant CNA has suffered a ransomware attack using a new variant called Phoenix CryptoLocker that is possibly linked to the Evil Corp hacking group.

01/30/2021

https://www.microsoft.com/security/blog/2021/01/20/deep-dive-into-the-solorigate-second-stage-activation-from-sunburst-to-teardrop-and-raindrop/

Our continued investigation into the Solorigate attack has uncovered new details about the handover from the Solorigate DLL backdoor (SUNBURST) to the Cobalt Strike loader (TEARDROP, Raindrop, and others).

01/14/2021

Here's another "Best Places" to work published by Glassdoor!

Employees have spoken! Here are the Best Places to Work in 2021, according to employees. Did your company make it?

01/12/2021

Interested in a new chapter, maybe one of these companies will be a good fit!?

Built In San Francisco’s Best Places to Work in San Francisco list ranks the startups and tech companies with the best employee benefits and salary in 2021. Did your company make the list?

01/11/2021

https://www.fireeye.com/blog/threat-research/2020/12/sunburst-additional-technical-details.html

FireEye has discovered additional details about the SUNBURST backdoor used in a global intrusion campaign by a sophisticated actor we are tracking as UNC2452.

01/10/2021

https://sapphirex00.medium.com/revil-aka-sodinokibi-ransomware-operator-interview-english-version-a5cb3e52ff2

For a long time the World has been hearing the ransomware word a lot since Wannacry and still today many hosts for different reasons are…

12/24/2020

SolarWinds attack - What it is and what's to come.

12/21/2020

Anyone else impacted by this glitch?

On Tuesday, Google's Gmail service had another disruption. The company attributed this to an issue with data migration

12/14/2020

More on the SolarWinds code compromise....

A site for cybersecurity directives and implementation guidance, from the Cybersecurity and Infrastructure Security Agency.