Season 2 · Episode 25
#38 - Intel Chat: Donut, Agrius, Kimsuky, Pikabot, QBot & the Gootloader Initial Access-as-a-Service Operation.
The Cybersecurity Defenders Podcast · Christopher
June 1, 202345m 4s
Audio is streamed directly from the publisher (podcast.wistia.com) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.
Show Notes
In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.
- FortiGaurd Labs encounters a kernel driver that makes use of the open-source donut tool.
- Checkpoint researchers observe Iranian threat actor Agrius operating against Israeli targets.
- SentielOne notes changes in the ongoing campaign by Kimsuky.
- Microsoft uncovers stealthy malicious activity aimed at critical infrastructure in the United States.
- ZScaler Threatlabz reporting on Pikabot, a new malware trojan.
- Bleeping Computer reporting that the QBot malware operation has started to abuse a DLL hijacking flaw in the Windows 10 WordPad program.
- eSentire launches a multi-pronged offensive against a growing cyberthreat: the Gootloader Initial Access-as-a-Service Operation.
The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.