Threat Actor Profiling

How cybersecurity experts use sinkholing to detect threat actors, identify victims

Scattered Spider targets the airline industry, raising questions about group’s goals

“What’s really made Scattered Spider stand out technically is their deep focus on social engineering and the speed at which they can compromise victims,” Halcyon exec tells IT Brew.

Threat actors are finding new ways to sneak spam past filters

Online account registration, event signup, and contact forms are all examples of web forms that spammers are leveraging to send unsolicited emails.

LockBit infiltrator Jon DiMaggio on human intelligence, sock puppets, and ransomware

Analyst1 Chief Security Strategist Jon DiMaggio unmasked LockBit’s ringleader before the police announced it.

Threat actors in China becoming ‘more brazen,’ NSA says

Dave Luber of the NSA told IT Brew new incidents tied to Volt Typhoon are unfolding every day based on “industry and incident response reporting.”

US charges 7 hackers affiliated with the Chinese government

Seven hackers connected to the Chinese government have been charged with conspiring to commit computer fraud and wire fraud as part of an extensive scheme that has victimized thousands, according to the US Attorney’s Office of the EDNY.

NSA says US still finding victims of Volt Typhoon’s espionage campaign

Rob Joyce, director of cybersecurity at the NSA, says the US is “still finding victims and making sure to clear out intrusions,” according to The Record.