🚨New ransom group blog post!🚨

Group name: SilentRansomGroup
Post title: P... C...
Info: https://cti.fyi/groups/SilentRansomGroup.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

Your org should be activating Entra ID conditional access policies to outright block device code authorizations with a carveout for very limited use cases such as meeting room conferencing devices. Even Microsoft knows this and has specific guidance on how to enforce it. Device code phishing is hot right now and these device code phishing-as-a-service platforms will likely lower the barrier of entry.

https://blog.sekoia.io/new-widespread-eviltokens-kit-device-code-phishing-as-a-service-part-1/

https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-block-authentication-flows

#phishing #eviltokens #soc #dfir #threathunting #cti #threatintel

🚨New ransom group blog post!🚨

Group name: qilin
Post title: SERVICE STAR FREIGHTWAYS
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨New ransom group blog post!🚨

Group name: qilin
Post title: SEEING MACHINES
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨New ransom group blog post!🚨

Group name: qilin
Post title: SERAM SPA
Info: https://cti.fyi/groups/qilin.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨New ransom group blog post!🚨

Group name: beast
Post title: Xiamen Tungsten Co. (XTC)
Info: https://cti.fyi/groups/beast.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨New ransom group blog post!🚨

Group name: worldleaks
Post title: Marion Military Institute
Info: https://cti.fyi/groups/worldleaks.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨New ransom group blog post!🚨

Group name: worldleaks
Post title: Matthews Real Estate Investment Services
Info: https://cti.fyi/groups/worldleaks.html

#ransomware #cti #threatintelligence #cybersecurity #infosec

🚨New ransom group blog post!🚨

Group name: worldleaks
Post title: Finance of America Companies Inc.
Info: https://cti.fyi/groups/worldleaks.html

#ransomware #cti #threatintelligence #cybersecurity #infosec