#31 - Intel Chat: 3CX Inception, QuaDream goes down, APTs targeting for destruction, AMOS & AuKill

The Cybersecurity Defenders Podcast

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

• The initial attack vector of 3CX’s network was via malicious software downloaded from Trading Technologies website
• QuaDream has allegedly fired all of its staff and is shutting down its operations in the coming days
• State-sponsored campaigns targeting global infrastructure: looks like obvious targeting to support future destructive attacks
• A new information-stealing malware called Atomic macOS Stealer (AMOS)
• Attackers have been observed attempting to disable EDR clients with a new defensive evasion tool we’ve dubbed AuKill

A new report put out by the National Cyber Security Centre is meant to help defenders understand selected malware threats in more technical depth, and provide indicators and TTPs to support threat hunting or modeling: View the Report

The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.