Publications

Filter

10 August 2023

Common TTPs of attacks against industrial organizations. Implants for uploading data

In this part we present information on the four types of implants and two tools used during the last (third) stage of the attacks discovered.

APT,
cloud services,
DLL hijacking,
FourteenHi

31 July 2023

Common TTPs of attacks against industrial organizations. Implants for gathering data

This part of the research is devoted to second stage malware used to gather data on infected systems of industrial organizations.

Air-gapped networks,
APT,
DLL hijacking,
FourteenHi,
Stolen data exfiltration,
USB removable media

20 July 2023

Common TTPs of attacks against industrial organizations. Implants for remote access

In this article (which is the first part of the report) we analyze common TTPs of implants used by threat actors to establish a persistent remote access channel into the infrastructure of industrial organizations.

APT,
APT31,
cloud services,
DLL hijacking,
FourteenHi,
MeatBall

Filter