Record · corpus.blog/posts/01a0f83b-d54e-7364-9815-59d4e6d6e682

Tracking Adversaries: Scattered Spider, the BlackCat affiliate

blog.bushidotoken.net · published 16 August 2023

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.bushidotoken.net Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 21
Words captured: 806

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://blogger.googleusercontent.com/img/a/AVvXsEhZ5maL0Hbb_hKwUEqznXzOvXZW4DiHWI5kpqkITWRKCkmpqSfBS_WXWFGNZmTTNyhX4xpJtQ3bY9GiQmLIcBjWESnNugiKeN7AuASb-_MBTC5dDTMEbYOB0GSyV_yw2Zl9OWjpCQ6soItPYxb1dFOH8IROaCEY_CM2M8By_bzMcP44qCjJA9wJa_x7tZ2i

blogger.googleusercontent.com

https://www.crowdstrike.com/cybersecurity-101/cyber-big-game-hunting/

crowdstrike.com

https://www.crowdstrike.com/blog/analysis-of-intrusion-campaign-targeting-telecom-and-bpo-companies/

crowdstrike.com

https://www.crowdstrike.com/blog/scattered-spider-attempts-to-avoid-detection-with-bring-your-own-vulnerable-driver-tactic/

crowdstrike.com

https://www.microsoft.com/en-us/microsoft-365-life-hacks/privacy-and-safety/what-is-sim-swapping

microsoft.com

https://sra.io/blog/cs-paralyzer-crowdstrike-edr-impairment-and-detections-for-your-team/

sra.io

https://www.mandiant.com/resources/blog/hunting-attestation-signed-malware

mandiant.com

https://www.bing.com/ck/a?!&&p=260d5d8479590f1eJmltdHM9MTY5MjE0NDAwMCZpZ3VpZD0xZmM5OTE4ZS03NmRiLTY2ZmYtMDQ2MC04M2VjNzczYjY3MjgmaW5zaWQ9NTE5Ng&ptn=3&hsh=3&fclid=1fc9918e-76db-66ff-0460-83ec773b6728&psq=blacklotus+welivesecurity&u=a1aHR0cHM6Ly93d3cud2VsaXZlc2VjdXJpdHkuY29tLzIwMjMvMDMvMDEvYmxhY2tsb3R1cy11ZWZpLWJvb3RraXQtbXl0aC1jb25maXJtZWQv&ntb=1

bing.com

https://www.youtube.com/watch?v=EkogMO9qioQ

youtube.com

https://github.com/BushidoUK/BushidoUK/blob/master/ScatteredSpider_0ktapus_Talk%20FINAL.pdf

github.com

https://blog.group-ib.com/0ktapus

blog.group-ib.com

https://www.mandiant.com/resources/blog/sim-swapping-abuse-azure-serial

mandiant.com

https://www.bing.com/search?q=%22Storm-0875%22&qs=n&form=QBRE&sp=-1&lq=0&pq=%22storm-0875%22&sc=1-12&sk=&cvid=5253190E0C59476988E8644055A29443&ghsh=0&ghacc=0&ghpl=

bing.com

https://www.pcmag.com/news/hackers-behind-riot-games-breach-stole-league-of-legends-source-code

pcmag.com

https://arstechnica.com/information-technology/2023/02/this-weeks-reddit-breach-shows-companys-security-is-still-woefully-inadequate/

arstechnica.com

https://twitter.com/BushidoToken/status/1670741782596812801?s=20

twitter.com

https://twitter.com/vxunderground/status/1670208418160820225

twitter.com

https://www.trendmicro.com/en_us/research/23/e/blackcat-ransomware-deploys-new-signed-kernel-driver.html

trendmicro.com

https://www.virustotal.com/gui/file/c8f9e1ad7b8cce62fba349a00bc168c849d42cfb2ca5b2c6cc4b51d054e0c497/community

virustotal.com

https://www.cyber.gc.ca/en/alerts-advisories/alphvblackcat-ransomware-targeting-canadian-industries

cyber.gc.ca

https://www.coinbase.com/blog/social-engineering-a-coinbase-case-study

coinbase.com