Threat Intelligence Research

Codefinger Ransomware: Detection and Mitigation Using MixMode

The Codefinger ransomware represents a new frontier in cyber threats, specifically targeting AWS S3 buckets. By exploiting Server-Side Encryption with Customer-Provided Keys (SSE-C), attackers gain control over the encryption process, rendering recovery impossible without their AES-256 keys.

Codefinger Ransomware: Detection and Mitigation Using MixMode Read More →

APT 1, COMMENT PANDA – PLA Unit 61398, CHINA

APT 1, COMMENT PANDA – PLA Unit 61398, CHINA Table of Contents Add a header to begin generating the table of contents Creation Date  09/25/2023 Last Update  09/25/2023 Author(s)  Jeremy Pickett, MixMode Change Log  0.04 Technical Updates  0.03 Initial MixMode version   Details on APT1  PLA Unit 61398, commonly known as APT1 or Comment Panda

APT 1, COMMENT PANDA – PLA Unit 61398, CHINA Read More →