Nocturnus Research | Cybersecurity News and Analysis

Dropping Anchor: From a TrickBot Infection to the Discovery of the Anchor Malware

Hacking

Dropping Anchor: From a TrickBot Infection to the Discovery of the Anchor Malware

Cybereason Nocturnus detected a series of targeted attacks against high-profile targets that uses a new variant of Anchor_DNS and a new malware dubbed Anchor.

Dec 11, 2019

Phoenix: The Tale of the Resurrected Keylogger

Next Generation Antivirus

Phoenix: The Tale of the Resurrected Keylogger

Cybereason’s Nocturnus team is tracking a new keylogger gaining traction among cybercriminals called Phoenix. Read about it and its reception in the underground here.

Nov 20, 2019

The Higher-Ed Security Challenge: Fully Protecting an Open Network

Prevention

The Higher-Ed Security Challenge: Fully Protecting an Open Network

Security teams at universities face a difficult task: how to reconcile full cybersecurity protection with an open IT environment.

Nov 19, 2019

Hunting Raccoon: The New Masked Bandit on the Block

Next Generation Antivirus

Hunting Raccoon: The New Masked Bandit on the Block

Since April 2019, the Cybereason Nocturnus team has investigated infections of the Raccoon stealer in the wild across organizations. Read about it here.

Oct 24, 2019

5 Capabilities of a Modern Endpoint Protection Platform

Endpoint Detection and Response

5 Capabilities of a Modern Endpoint Protection Platform

In order to address the evolving threat landscape, the security industry has turned to more comprehensive endpoint protection platforms. What are they?

Oct 7, 2019

The Timeline to Consolidation of Endpoint Protection Platforms and EDR

Endpoint Detection and Response

The Timeline to Consolidation of Endpoint Protection Platforms and EDR

The endpoint security market is in the midst of a consolidation of EDR and EPP. How did we get here? Read on to find out.

Sep 25, 2019

Fileless Malware 101: Understanding Non-Malware Attacks

Malware

Fileless Malware 101: Understanding Non-Malware Attacks

Unlike attacks carried out using traditional malware, fileless malware attacks don’t entail attackers installing software on a victim’s machine. Instead, tools that are built-in to Windows are hijacked by adversaries and used to carry out attacks. Essentially, Windows is turned against itself.

Sep 17, 2019

Blog

Dropping Anchor: From a TrickBot Infection to the Discovery of the Anchor Malware

Dropping Anchor: From a TrickBot Infection to the Discovery of the Anchor Malware

Phoenix: The Tale of the Resurrected Keylogger

Phoenix: The Tale of the Resurrected Keylogger

The Higher-Ed Security Challenge: Fully Protecting an Open Network

The Higher-Ed Security Challenge: Fully Protecting an Open Network

Hunting Raccoon: The New Masked Bandit on the Block

Hunting Raccoon: The New Masked Bandit on the Block

5 Capabilities of a Modern Endpoint Protection Platform

5 Capabilities of a Modern Endpoint Protection Platform

The Timeline to Consolidation of Endpoint Protection Platforms and EDR

The Timeline to Consolidation of Endpoint Protection Platforms and EDR

Fileless Malware 101: Understanding Non-Malware Attacks

Fileless Malware 101: Understanding Non-Malware Attacks

Explaining Fileless Malware Succinctly with Examples from our Research

Explaining Fileless Malware Succinctly with Examples from our Research

Glupteba Expands Operation and Toolkit with LOLBins And Cryptominer

Glupteba Expands Operation and Toolkit with LOLBins And Cryptominer

Sodinokibi: The Crown Prince of Ransomware

Sodinokibi: The Crown Prince of Ransomware

Subscribe for Updates