Filter By:

12/13/2023

5 min read

Former DarkSide ransomware affiliate distributing trojanized installers via malvertising

By: Blake Eakin

Recently, the ConnectWise Cyber Research Unit™ has observed several incidents stemming from malvertising campaigns. Learn more about these incidents and how they’re impacting the cyberthreat landscape.

Read the blog

Cybersecurity

10/25/2023

8 min read

Reviewing Qakbot loader sequences: Part 4

By: Blake Eakin

In the fourth and final installment of our Qakbot series, discover threat techniques that were used to evade defenses by requiring minimal user interaction and maintaining a low level of suspicion.

Read the blog

Cybersecurity

10/18/2023

12 min read

Reviewing Qakbot loader sequences: Part 3

By: Blake Eakin

In Part 3 of our Qakbot blog series, we dive into DLL execution paths, which paths Qakbot primarily used, and how they can be used to identify suspicious behaviors and indicate malicious activity.

Read the blog

Cybersecurity

10/11/2023

12 min read

Reviewing Qakbot loader sequences: Part 2

By: Blake Eakin

In the second installment of this multi-part series, explore varying phishing payload methods used by Qakbot to carry out cyberattacks and discover how they can help with threat detection and remediation.

Read the blog

Cybersecurity

10/04/2023

8 min read

Reviewing Qakbot loader sequences: Part 1

By: Blake Eakin

Following the recent takedown of Qakbot infrastructure, explore the threat techniques they leveraged to infiltrate secure systems and gain valuable insight into what they may do next.

Read the blog

Cybersecurity

06/09/2023

9 min read

SmashJacker

By: Blake Eakin

The CRU uncovered a campaign spanning back to at least October of 2022 pushing a persistent Chromium extension via software, game, and movie pirating web pages that we are referring to as SmashJacker.

Read the blog

Threat Report