Cyber Risks · Cisco Talos

Researcher Spotlight: How Asheer Malhotra looks for ‘instant gratification’ in threat hunting

Summary: Cisco Talos researcher Asheer Malhotra spends most of his time threat hunting, with roughly 90 percent of that work never published, and focuses much of his research on state-sponsored actors in Asia such as Transparent Tribe and MuddyWater. He says Transparent Tribe has added several remote access trojans, targeted high-profile government-adjacent entities in India, and expanded its scope across the region, and he names double extortion as his main concern.

Bottom line: Malhotra describes disclosure as a way to "burn that campaign" so the actor has to rebuild its tactics, techniques and procedures - the goal being to make each attack more expensive and cumbersome for the adversary rather than to stop every one.

Read the original at Cisco Talos ↗

Topics
Threat Actors & Nation-State
Related