Today, December 4 and December 11 talos is publishing a glimpse in to the most prevalent threats we’ve observed between. Much like previous roundups, this blog post isn’t meant to end up being an in-depth evaluation. Instead, this posting shall summarize the threats we’ve noticed by highlighting key behavioral features, indicators of compromise, and discussing how our customers are usually protected from these threats automatically.

As a reminder, the info provided for the next threats in this article is non-exhaustive and present as of the time of publication. In addition, please remember that IOC searching is one section of threat hunting. Spotting an individual IOC will not indicate maliciousness necessarily. Coverage and recognition for the next threats is at the mercy of updates, pending additional vulnerability or even threat analysis. For probably the most current details, please make reference to your Firepower Management Middle, Snort.org, or even ClamAV.net.

Read More

Reference

20201211-tru.json – it is a JSON document which includes the IOCs referenced in this article, along with all hashes linked to the cluster. The checklist is bound to 25 hashes in this website post. As constantly, please understand that all IOCs within this document are usually indicators, and that certain single IOC will not indicate maliciousness. Notice the Read Even more link over for more details.