Cyber Risks · Cisco Talos

Threat Source newsletter (Jan. 23, 2020)

Summary: Cisco Talos' Jan. 23, 2020 Threat Source newsletter describes a cryptominer actor named Vivin that has been active since 2017 and is continuing malicious activity into 2020, and notes upcoming changes to Snort.org. It also previews Talos talks on DNS-manipulating actors, including the campaign named Sea Turtle, which targets registrars and a registry, at Swiss Cyber Security Days on Feb. 12-13.

What you should know: Sea Turtle is described as more advanced and aggressive than previously observed actors, and it does not hesitate to directly target registrars and a registry - the parties that control how domains resolve for everyone downstream.

Read the original at Cisco Talos ↗

Topics
Malware
Related