#65 - Intel Chat: DB#JAMMER, Chae$ malware, W3LL, APT34 deploy Side Twist Trojan and government-backed actors in North Korea target security researchers.

The Cybersecurity Defenders Podcast

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

• Securonix Threat Labs are reporting that threat actors working as part of the DB#JAMMER attack campaigns are compromising exposed MSSQL databases using brute force attacks.
• Morphisec are reporting a previously unknown version of the Chae$ malware.
• AhnLab’s Security Emergency Response Center are reporting on threat actors using phishing emails to distribute some fileless malware.
• The researchers over at Group-IB have uncovered a covert business email compromise phishing campaign targeting Microsoft 365.
• NSFOCUS Security Labs captured a new APT34 phishing attack against enterprise targets that released a variant of the SideTwist Trojan to achieve long-term control of the victim host.
• Threat Analysis Group publicly disclosed a campaign from government-backed actors in North Korea who used 0-day exploits to target security researchers working on vulnerability research and development.

The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.