Latest Lateral Movement news

NSA shares zero-trust guidance to limit adversaries on the network

The National Security Agency is sharing new guidance to help organizations limit an adversary's movement on the internal network by adopting zero-trust framework principles.
- Ionut Ilascu
- March 05, 2024
- 06:29 PM
- 0
New SSH-Snake malware steals SSH keys to spread across the network

A threat actor is using an open-source network mapping tool named SSH-Snake to look for private keys undetected and move laterally on the victim infrastructure.
- Bill Toulas
- February 21, 2024
- 02:03 PM
- 2
New TetrisPhantom hackers steal data from secure USB drives on govt systems

A new sophisticated threat tracked as 'TetrisPhantom' has been using compromised secure USB drives to target government systems in the Asia-Pacific region.
- Bill Toulas
- October 22, 2023
- 11:18 AM
- 0
Iranian hackers lurked in Middle Eastern govt network for 8 months

The Iranian hacking group tracked as OilRig (APT34) breached at least twelve computers belonging to a Middle Eastern government network and maintained access for eight months between February and September 2023.
- Bill Toulas
- October 19, 2023
- 12:40 PM
- 0
Microsoft: Hackers target Azure cloud VMs via breached SQL servers

Hackers have been observed trying to breach cloud environments through Microsoft SQL Servers vulnerable to SQL injection.
- Bill Toulas
- October 04, 2023
- 10:53 AM
- 0
'Redfly' hackers infiltrated power supplier's network for 6 months

An espionage threat group tracked as 'Redfly' hacked a national electricity grid organization in Asia and quietly maintained access to the breached network for six months.
- Bill Toulas
- September 12, 2023
- 06:00 AM
- 0
New Microsoft Azure AD CTS feature can be abused for lateral movement

Microsoft's new Azure Active Directory Cross-Tenant Synchronization (CTS) feature, introduced in June 2023, has created a new potential attack surface that might allow threat actors to more easily spread laterally to other Azure tenants.
- Bill Toulas
- August 03, 2023
- 06:55 PM
- 1
USB drive malware attacks spiking again in first half of 2023

What's old is new again, with researchers seeing a threefold increase in malware distributed through USB drives in the first half of 2023
- Bill Toulas
- July 13, 2023
- 01:02 AM
- 1
Hackers start abusing Action1 RMM in ransomware attacks

Security researchers are warning that cybercriminals are increasingly using the Action1 remote access software for persistence on compromised networks and to execute commands, scripts, and binaries.
- Ionut Ilascu
- April 15, 2023
- 12:45 PM
- 2
Qbot needs only 30 minutes to steal your credentials, emails

The widespread malware known as Qbot (aka Qakbot or QuakBot) has recently returned to light-speed attacks, and according to analysts, it only takes around 30 minutes to steal sensitive data after the initial infection.
- Bill Toulas
- February 08, 2022
- 03:12 AM
- 0