The Inner Circle

 View Only

  • 1.  Hackbit Ransomware Attack Uses GuLoader, Malicious Microsoft Excel Attachments

    Posted Jun 23, 2020 10:47:00 AM
    https://threatpost.com/hackbit-ransomware-attack-uses-guloader-malicious-microsoft-excel-attachments/156826/

    ------------------------------
    Sean Heide
    Research Analyst
    CSA
    ------------------------------


  • 2.  RE: Hackbit Ransomware Attack Uses GuLoader, Malicious Microsoft Excel Attachments

    Posted Jun 23, 2020 01:03:00 PM
    Hi Sean
    You have valuable information from earlier Proofpoint blog posts [1] and [2] with IOCs.
    Looks like the infamous Thanos ransomware builder is again in the game.
    Regards

    [1] https://www.proofpoint.com/us/blog/threat-insight/hakbit-ransomware-campaign-against-germany-austria-switzerland
    [2] https://www.proofpoint.com/us/threat-insight/post/guloader-popular-new-vb6-downloader-abuses-cloud-services

    ------------------------------
    Olivier Caleff - CSA French Chapter - Chapter Leader - [email protected] - https://CloudSecurityAlliance.fr
    ------------------------------

    Original Message


  • 3.  RE: Hackbit Ransomware Attack Uses GuLoader, Malicious Microsoft Excel Attachments

    Posted Jun 23, 2020 01:45:00 PM
    Hi Olivier!

    Yeah this seems to be spreading at a decent rate as well. I wonder how long until it transfers to other systems outside of the already named countries. Something to keep an eye on for sure.

    ------------------------------
    Sean Heide
    Research Analyst
    CSA
    ------------------------------

    Original Message