Threat Source newsletter for Sept. 3, 2020
Summary: Cisco Talos reported a series of email campaigns using links to malicious documents hosted on legitimate file-sharing platforms to distribute Gozi ISFB, ZLoader, SmokeLoader, AveMaria and other payloads. Talos Incident Response said ransomware dominated the past quarter, with LockBit and Maze among the families observed and 66 percent of ransomware attacks involving the Cobalt Strike red-teaming framework.
What you should know: Two-thirds of the ransomware attacks Talos IR observed leaned on Cobalt Strike rather than commodity trojans, meaning the intrusion tooling behind them looks like legitimate red-team activity to many defenses.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026