Publications

Microsoft pays up

Microsoft has announced that the $250,000 reward which was on the head of the Sasser author will be handed out to the two people who have lead to the arrest of Sven Jaschan.
The money will be split in two, which means each person gets $125,000.

This is a bit surprising as shortly after Jaschan’s arrest, sources claimed that MS wouldn’t pay up due to an alledged connection between Jaschan and the two individuals. Apparently this is not the case.

I’m still in doubt whether Jaschan would have received a (significantly) higher punishment if he had been 18 instead of 17.

In the AV industry there are some very young individuals at pretty important places which require quite some sense of responsibility.
Yet the verdicts which young blackhats, minor or no minor, receive are mild. Their age, and lacking sense of responsibility because of that age, play a great part in the judges their rulings.

Those things don’t add up to me.

Microsoft pays up

Your email address will not be published. Required fields are marked *

 

Reports

Operation TunnelSnake

A newly discovered rootkit that we dub ‘Moriya’ is used by an unknown actor to deploy passive backdoors on public facing servers, facilitating the creation of a covert C&C communication channel through which they can be silently controlled. The victims are located in Africa, South and South-East Asia.

APT trends report Q1 2021

This report highlights significant events related to advanced persistent threat (APT) activity observed in Q1 2021. The summaries are based on our threat intelligence research and provide a representative snapshot of what we have published and discussed in greater detail in our private APT reports.

The leap of a Cycldek-related threat actor

The investigation described in this article started with one such file which caught our attention due to the various improvements it brought to this well-known infection vector.

Subscribe to our weekly e-mails

The hottest research right in your inbox