May 2025 TRU Intelligence Briefing On-Demand

Join eSentire’s Threat Response Unit (TRU) as they share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.

During the May Threat Intelligence Briefing, TRU reviewed:

• North Korean IT Workers - A Growing Insider Threat: How North Korean IT workers infiltrate organizations, covering their TTPs, IOCs, and emerging trends like AI-driven deception and global expansion.
• North Korean Remote IT Worker Observations: eSentire's observations relating to the North Korean Remote IT workers and mitigation recommendations.
• Threat Landscape: An overview of malware observed by eSentire’s Security Operation Center (SOC), with a focus on BackConnect, ClearFake, and NetSupport RAT. This section will also include details on three notable vulnerabilities (CVE-2025-31324 SAP NetWeaver, CVE-2025-32432 Craft CMS, CVE-2025-34028 Commvault).
• A brief geopolitical update on activity associated with a Russian state-sponsored APT group.

This webinar also included a live Q&A.