Cyber Risks · Cisco Talos

Threat Source newsletter (Feb. 6, 2020)

Summary: Cisco Talos published its Feb. 6, 2020 Threat Source newsletter, which announced a redesigned Podcasts page housing both Beers with Talos and the new Talos Takes show, and a Beers with Talos episode on why PowerShell has been so widely used in malware. The newsletter also promoted two Talos talks: Paul Rascagnères presenting at Swiss Cyber Security Days on Feb. 12-13 about two threat actors manipulating DNS, including the more advanced and aggressive actor behind the campaign named "Sea Turtle" that directly targets registrars and a registry, and Nick Biasini at Interop Tokyo 2020 on April 13-15 on the disappearing gap between sophisticated and basic adversaries.

Key Takeaway: Talos describes Sea Turtle as more advanced and aggressive than previously observed actors, willing to directly target registrars and a registry - a reminder that the DNS layer your organization depends on can be attacked above your own perimeter.

Read the original at Cisco Talos ↗

Topics
Threat Actors & Nation-State
Related