The complexities of attack attribution – Week in security with Tony Anscombe

Cyber Security

Video

As highlighted by new ESET research this week, attributing a cyberattack to a specific threat actor is a complex affair

Attributing a cyberattack to a specific threat actor is no easy task, as highlighted by new ESET research published this week. ESET experts recently uncovered a new China-aligned APT group that they named CeranaKeeper and that takes aim at governmental institutions in Thailand, leveraging some tools previously attributed to Mustang Panda. However, a thorough review of the group’s tactics, techniques and procedures (TTPs), code, and infrastructure discrepancies suggests that CeranaKeeper and MustangPanda should be tracked as two separate entities.

How exactly were the attacks executed, and what more is there to know about CeranaKeeper and its relentless hunt for data? Find out in the video and make sure to also read this aptly-named blogpost Separating the bee from the panda: CeranaKeeper making a beeline for Thailand and the related comprehensive white paper CeranaKeeper: A relentless, shape-shifting group targeting Thailand.

Connect with us on FacebookTwitterLinkedIn and Instagram.

Products You May Like

Articles You May Like

US Sanctions Crypto Exchanges for Facilitating Russian Cybercrime
U.S. and Microsoft Seize 107 Russian Domains in Major Cyber Fraud Crackdown
New MedusaLocker Ransomware Variant Deployed by Threat Actor
U.S. Charges Three Iranian Nationals for Election Interference and Cybercrimes
Cybersecurity Awareness Month needs a radical overhaul – it needs legislation

Leave a Reply

Your email address will not be published. Required fields are marked *