Threat Source newsletter (Aug. 11, 2022) — All of the things-as-a-service
Summary: Cisco Talos reports that every category of malware now has an "as-a-service" variant, including infostealers-as-a-service and a new "C2 as-a-service" platform called Dark Utilities where attackers pay a third-party site to act as their command and control. The same newsletter notes Microsoft's Patch Tuesday fixed more than 120 vulnerabilities, including CVE-2022-34713, an MSDT remote code execution flaw exploited in the wild, and Adobe patched 25 vulnerabilities, mainly in Acrobat Reader.
Bottom line: Talos' point is that cash, not coding skill, is now the barrier to entry: anyone with internet access and money can rent out-of-the-box malware and launch an attack, and outside direct law enforcement intervention there are few ways to take these platforms offline.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026