Threat Source newsletter (July 7, 2022) — Teamwork makes the dream work
Summary: Cisco Talos used its July 7, 2022 newsletter to explain its disclosure policy, stating that publicizing attacker techniques forces threat actors to change tactics and raises the cost of doing business for them. The same issue covered a joint CISA-FBI advisory on MedusaLocker ransomware, which gains access through vulnerable RDP configurations or phishing and spam emails, and a suspected Lazarus Group theft of $100 million from the Harmony Horizon Bridge using stolen employee credentials.
What's compelling: MedusaLocker made its name targeting health care organizations during the COVID-19 pandemic, and CISA's advisory states any industry could be a target. The Harmony case shows a $100 million loss traced to stolen usernames and passwords, the same credential exposure that RDP misconfigurations hand to ransomware crews.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026