APT40 TTP’s

Tactics, Techniques, and Procedures of Indicted APT40 Actors Associated with China ’s MSS Hainan State Security Department SUMMARY APT40—aka BRONZE MOHAWK, FEVERDREAM, G0065, Gadolinium, GreenCrash, Hellsing, Kryptonite Panda, Leviathan, MUDCARP, Periscope,...

OSN July 14, 2021

Title: Hackers Use New Solarwinds Zero-Day to Target U.S. Defense Orgs Date Published: July 13, 2021 https://www.bleepingcomputer.com/news/microsoft/hackers-use-new-solarwinds-zero-day-to-target-us-defense-orgs/ Excerpt: “Tonight, Microsoft revealed that the attacks...

OSN July 1, 2021

Title: Printnightmare 0-Day Can Be Used to Take Over Windows Domain Controllers Date Published: July 1, 2021 PrintNightmare 0-day can be used to take over Windows domain controllers Excerpt: “In June, Microsoft patched a vulnerability in the Windows Print Spooler that...

OSN June 14, 2021

Title: REvil Hits US Nuclear Weapons Contractor: Report Date Published: June 11, 2021 REvil Hits US Nuclear Weapons Contractor: Report Excerpt: “Whether REvil – or whichever gang proves to be responsible for the attack – got its hands on more sensitive, secret...

OSN April 29, 2021

Title: Security Expert Coalition Shares Actions to Disrupt Ransomware Date Published:  April 29, 2021 https://www.bleepingcomputer.com/news/security/security-expert-coalition-shares-actions-to-disrupt-ransomware/ Excerpt:  “The Ransomware Task Force, a public-party...