The eSentire Blog

TRU Positive/Bulletin

9 M

eSentire Threat Intelligence Malware Analysis: Raspberry Robin

Since May 2022, eSentire’s Threat Response Unit (TRU) has observed 11 cases of Raspberry Robin infections.…

READ NOW →

TRU Positive/Bulletin

5 M

Gootloader Malware Leads to Cobalt Strike and Hand-on-Keyboard Activity

Adversaries don’t work 9-5 and neither do we. At eSentire, our 24/7 SOCs are staffed with Elite Threat Hunters and…

READ NOW →

Threat Intelligence

8 M

MD(I)R: Why Investigation is the Invisible ‘I’ in MDR

Today’s security leaders are challenged not just by a skills shortage and budgetary constraints, but by immense…

READ NOW →

Threat Intelligence

2 M

Tactical Experts Driving Success for Ransomware Gangs

Ten, twenty years ago, when you heard the word ‘ransomware’ it was because you (or someone you know) clicked a…

READ NOW →

Threat Response Unit

10 M

Hackers Exploit Fortinet Devices to Spread Ransomware within Corporate Environments, Wa...

Summary In mid and late November 2022, eSentire detected and shut down hackers attempting to infect two of its…

READ NOW →

TRU Positive/Bulletin

6 M

Recent FakeBat Activity Observed in December 2022

Adversaries don’t work 9-5 and neither do we. At eSentire, our 24/7 SOCs are staffed with Elite Threat Hunters and…

READ NOW →

TRU Positive/Bulletin

3 M

FortiOS - Authentication Bypass CVE-2022-40684

Adversaries don’t work 9-5 and neither do we. At eSentire, our 24/7 SOCs are staffed with Elite Threat Hunters and…

READ NOW →

TRU Positive/Bulletin

18 M

eSentire Threat Intelligence Malware Analysis: Redline Stealer

Redline Stealer is one of the most popular stealers being sold and used by cybercriminals. The command and control…

READ NOW →

TRU Positive/Bulletin

5 M

GootLoader Striking with a New Infection Technique

On December 2, 2022, one of our 24/7 SOC Cyber Analysts escalated an incident involving the GootLoader malware at…

READ NOW →

TRU Positive/Bulletin

8 M

Disrupting an Active Ransomware Attack Over the Course of Hours

Recently, eSentire’s Security Operations Center responded to a ransomware attack in progress. The attack was…

READ NOW →

TRU Positive/Bulletin

5 M

Intruder Deploys Medusa Unlocker instead of Medusa Locker in Attempted Medusa Ransomwar...

Recently, a hands-on intruder immediately began to attempt lateral movement and gain credential access upon…

READ NOW →

TRU Positive/Bulletin

4 M

BatLoader Facilitates Fraud and Hands-On-Keyboard Attacks

Adversaries don’t work 9-5 and neither do we. At eSentire, our 24/7 SOCs are staffed with Elite Threat Hunters and…

READ NOW →
Page
of 23