Blog

This article dives into a recent credit card data breach targeting a hybrid cloud-on-premises infrastructure, reconstructing the attack path and analyzing the malicious programs and techniques employed by the attackers.

This post discusses the definition of intelligence sources, their relationship with Cyber Threat Intelligence (CTI), how reliable intelligence sources assist organizations and communities in detecting and defending against threats, and how compromised intelligence sources can undermine the trust that organizations built over time.​

CyCraft's research team identified potential risks in Microsoft Entra ID's new features, which could be exploited for privilege escalation attacks. This article analyzes these potential attack paths and provides mitigation plans to proactively address them before any incidents occur.

Valentine’s Day this year saw the end of a truly toxic relationship — a prolonged supply chain attack targeting the Taiwan financial and securities trading sector that had begun back in November 2021. Evidence uncovered during a CyCraft incident response (IR) investigation ties these attacks to APT10 — a China state-sponsored hacker group widely believed to be associated with the Chinese Intelligence Agency, the Ministry of State Security (MSS).

CyCraft uncovered intelligence regarding the November 2021 cyberattacks targeting the Taiwan financial and securities trading sector; CyCraft further attributed the cyberattacks to APT10 — a China state-sponsored hacker group widely believed to be associated with the Chinese Intelligence Agency, the Ministry of State Security (MSS).

The road to constructing an effective novel response against ransomware begins with understanding the recent trends of the underground ransomware ecosystem: common targets of ransomware, typical ransomware behavior, common ransomware encryption schemes, as well as the construction and application of decryptors and other effective response approaches and tools.