Author: HackWatchit

OBSCURE#BAT malware campaign exploits social engineering & fake software downloads to evade detection, steal data and persist on systems. Learn how to stay safe. Cybersecurity researchers at Securonix Threat Labs have spotted a new malware campaign called OBSCURE#BAT. This campaign uses social engineering tactics and fake software downloads to trick users into executing malicious code, enabling attackers to infect systems and avoid detection. The attack begins with a user executing a malicious batch file, which is often disguised as legitimate security features or malicious software downloads. Once executed, the malware establishes itself by creating scheduled tasks and modifying the Windows…

Medusa ransomware hit over 300 critical infrastructure organizations until February 2025 Pierluigi Paganini March 13, 2025 The Medusa ransomware operation hit over 300 organizations in critical infrastructure sectors in the United States until February 2025. The FBI, CISA, and MS-ISAC have issued a joint advisory detailing Medusa ransomware tactics, techniques, and indicators of compromise (IOCs) based on FBI investigations as recent as February 2025. This advisory is part of the #StopRansomware initiative, providing guidance to network defenders on ransomware variants and threat actors. “Medusa is a ransomware-as-a-service (RaaS) variant first identified in June 2021. As of February 2025, Medusa developers…

The global blockchain security market is projected to grow from an estimated US$20bn in 2024 to $250bn in the next five years as companies leverage the technology to enhance a variety of different processes, but this growth will also reshape the risk and insurance landscape, according to a new report from Allianz Commercial.  Blockchain technology is often associated with cryptocurrency transactions such as Bitcoin as it is seen to offer a secure and protected way to carry out transfers. However, its adoption continues to evolve significantly within large corporations, with many now leveraging the technology to enhance a variety of…

The Cybersecurity and Infrastructure Security Agency must refocus its mission to sharpen its core capabilities and expand its authority, moving away from bureaucratic distractions such as disinformation monitoring. CISA’s primary mission is to secure federal networks and critical infrastructure, yet recent years have seen the agency’s focus drift into areas like policing social media. Simultaneously, overlapping regulations from other federal agencies have added unnecessary complexity for businesses, diluting CISA’s effectiveness. The Trump administration has a unique opportunity to enhance CISA’s capabilities by honing in on its core responsibilities, thus streamlining operations and improving efficiency. This involves reducing mission creep and…

While some games, like rock-paper-scissors, only work if all payers decide on their actions simultaneously, other games, like chess or Monopoly, expect the players to take turns one after another. In Game Theory, the first kind of game is called a static game, while turn-taking is a property of so-called dynamic games. In this article, we will analyse the latter with methods from game theory.  This article is the fourth part of a four-chapter series on the fundamentals of game theory. I recommend you to read the first three articles if you haven’t done that yet, as the concepts shown…

25 Oct 2022 Webcast: How DNS can be abused for Command & Control w/ Troy Wojewoda Webcast: Getting Started: Cybersecurity Maturity Model Certification (CMMC) w/ CJ Cox & Adam Austin Looking For Something?Browse by category Select Category Alyssa Snow  (7) Ashley Knowles  (1) Ashley Van Hoesen  (1) Author  (402) Backdoors & Breaches  (7) Beau Bullock  (32) Ben Bowman  (1) Ben Burkhart  (1) Blue Team  (101) Blue Team Tools  (40) Brian Fehrman  (18) Brian Ireland  (1) Brian King  (20) Bronwen Aker  (1) C2  (29) Cameron Cartier  (2) Carrie Roberts  (5) Chris Sullo  (1) Chris Traynor  (2) CJ Cox  (8) Connor Costigan  (1) Corey Ham  (4) Craig Vincent  (2) Dale Hobbs  (3) Daniel Pizarro  (1) Darin Roberts  (1) Dave Blandford  (2) David Fletcher  (30) David Perez  (1) Deb Wigley  (1) Debjeet Banerjee  (1)…

A dual Russian-Israeli national, suspected of being a key developer for the LockBit ransomware operation, has been extradited to the United States to face charges. Rostislav Panev, 51, was arrested in Israel last August, where police reportedly found incriminating evidence on his laptop. This included credentials for LockBit’s internal control panel and a repository containing source code for LockBit encryptors and the gang’s custom data theft tool, StealBit. In December, the U.S. Department of Justice charged Panev, accusing him of developing LockBit’s ransomware encryptors and StealBit. Over 18 months, between June 2022 and February 2024, Panev allegedly earned $230,000 in cryptocurrency…

EmberOT, a provider of industrial asset and network monitoring solutions, announced on Thursday the launch of Version 3.2. This release features several improvements that empower operators and security teams to leverage real-time data better. The update includes entirely new features, such as Gravwell integration for more data storage capability, user-friendly compliance workflows, and additional protocols. The newly streamlined interface was created with users and operators in mind and offers a useful customization capability that fosters quick and efficient decision-making. “Our goal has always been to ensure that operators and defenders on any sized critical infrastructure or industrial campus can easily…

Ten years ago, everybody was fascinated by the cloud. It was the new thing, and companies that adopted it rapidly saw tremendous growth. Salesforce, for example, positioned itself as a pioneer of this technology and saw great wins. The tides are turning though. As much as cloud providers still proclaim that they’re the most cost-effective and efficient solution for businesses of all sizes, this is increasingly clashing with the day-to-day experience. Cloud Computing was touted as the solution for scalability, flexibility, and reduced operational burdens. Increasingly, though, companies are finding that, at scale, the costs and control limitations outweigh the…