Threat Source newsletter for April 30, 2020
Summary: Cisco Talos reported that its newest research post covers the Aggah campaign, in which threat actors push the malware to victims through malicious Microsoft Word documents and use the infection to install Agent Tesla, njRAT and Nanocore RAT. The newsletter also notes a Talos talk at Interop Tokyo 2020 on June 10-12, where Nick Biasini is set to describe how the line between sophisticated and basic adversaries is disappearing as commodity infections turn into enterprise-crippling ransomware.
What you should know: Talos frames the shift plainly: commodity infections that once needed simple triage can now become ransomware attacks costing organizations millions of dollars to recover, so the basic adversary is no longer a basic problem.
Read the original at Cisco Talos ↗
- Topics
- Threat Actors & Nation-State
- Related
- University of Texas at Arlington warns personal information stolen during cyberattack Cyber Risks · Nov 13, 2026Hackers Exploit PHP2Shell Flaws in Check Point Gateways to Deploy TSGA Backdoor and Wipe ESXi Files Cyber Risks · Nov 13, 2026Hackers compromise 4,800 GitHub accounts to steal cloud credentials Cyber Risks · Nov 12, 2026