Black Basta Ransomware Gang Infiltrates Networks via QAKBOT, Brute Ratel, and Cobalt Strike

October 25, 2022
Post Author / Publisher: Trend Micro Security

CISO2CISO post categories: 0 - CT, 0 - CT - SOC - CSIRT Operations - Malware & Ransomware, Cyber Security News, FeedzyAuto, FeedzyAutoTOP, Trend Micro Security

Rate this post

We analyzed a QAKBOT-related case leading to a Brute Ratel C4 and Cobalt Strike payload that can be attributed to the threat actors behind the Black Basta ransomware.Leer másTrend Micro Research, News, Perspectives

Views: 0

CISO2CISO post categories: 0 - CT, 0 - CT - SOC - CSIRT Operations - Malware & Ransomware, Cyber Security News, FeedzyAuto, FeedzyAutoTOP, Trend Micro Security

Secure Software Development Lifecycle Fundamentals by Codrut Andrei

Secure Software Development Lifecycle Fundamentals...

BUTTERWORTH-HEINEMANN

Security Operations Center Guidebook – A Practical Guide for a Successful SOC

Security Operations Center Guidebook –...

CISO’s – First 100 Days Roadmap – Your success as a security leader is determined largely by your first 100 days in the role.

CISO’s – First 100 Days...

State of Kubernetes Security Report 2022 by RedHat

State of Kubernetes Security Report...

National Cyber Security

Cyber Security Toolkit for Boards – Helping board members to get to grips with cyber security by NCSC

Cyber Security Toolkit for Boards...

Cybercrime Investigators Handbook by WILEY

Cybercrime Investigators Handbook by WILEY

Marcos Jaimovich

The Silent Spectre Haunting Your Network: QPhishing, the CISO’s Unspoken Nightmare.

The Silent Spectre Haunting Your...

Marcos Jaimovich

Goodbye to Traditional: Why Conventional Cybersecurity Tools are No Longer Sufficient for the Future of Digital Threats ?

Goodbye to Traditional: Why Conventional...

Marcos Jaimovich

Why do we compare a SOC (Security Operations Center) with the cockpit of a commercial airplane? by Marcos Jaimovich

Why do we compare a...

Security Operations Center (SOC) – Tools for Operations Development by Joas Antonio

Security Operations Center (SOC) –...

Incident Response Playbooks & Workflows Ready for use in your SOC & Redteams

Incident Response Playbooks & Workflows...

396 Use Cases & Siem Rules Code ready for use for Mitre Attacks Events Detection in Your SOC by Logpoint

396 Use Cases & Siem...

Cybersecurity Program Template A resource to help individual licensees and individually owned businesses develop a cybersecurity program as required by New York State’s Cybersecurity Regulation 23 NYCRR Part 500

Cybersecurity Program Template A resource...

Cyber Security on Azure An IT Professional’s Guide to Microsoft Azure Security

Cyber Security on Azure An...

ASSET IDENTIFICATION & CLASSIFICATION-A CRITICAL COMPONENT OF CYBER RISK MANAGEMENT

ASSET IDENTIFICATION & CLASSIFICATION-A CRITICAL...

CybercrimeTrends 2024 The latest threats and security best practices

CybercrimeTrends 2024 The latest threats...

Cyber Security Politics Socio-Technological Transformations and Political Fragmentation

Cyber Security Politics Socio-Technological Transformations...

Surviving a Massive cyber-attack by Cigref

Surviving a Massive cyber-attack by...

Surviving a Massive cyber-attack by Cigref

Surviving a Massive cyber-attack by...

SPLUNK® AND THE CIS CRITICALSECURITY CONTROLS Mapping Splunk Software to the CIS 20 CSC Version 6.0

SPLUNK® AND THE CIS CRITICALSECURITY...

SOC SIEM Use Cases

SOC SIEM Use Cases

Six Pillars of DevSecOps- Collaboration and Integration

Six Pillars of DevSecOps- Collaboration...

WatchTower I ntelligence-Driven Threat Hunting

WatchTower I ntelligence-Driven Threat Hunting

Security of Personal Data

Security of Personal Data

CISA | Cybersecurity and Infrastructure Security Agency

UNDERSTANDING AND RESPONDING TO DISTRIBUTED DENIAL-OF-SERVICE ATTACKS

UNDERSTANDING AND RESPONDING TO DISTRIBUTED DENIAL-OF-SERVICE ATTACKS

McKinsey & Company

Transforming risk efficiency and effectiveness

Transforming risk efficiency and effectiveness

Zero Trust Security Model

Zero Trust Security Model

Your Cybersecurity Toolkit

Your Cybersecurity Toolkit

IGNITE Technologies

Wireless Penetration Testing

Wireless Penetration Testing

Windows API for Red Team #101

Windows API for Red Team #101

Economic Research Working Paper

Artificial Intelligence and Intellectual Property

Artificial Intelligence and Intellectual Property

CASOS DE USO APLICABLES EN UN SIEM

CASOS DE USO APLICABLES EN UN SIEM

IGNITE Technologies

Burp Suite for Pentester

Burp Suite for Pentester

The Institute of Internal auditors

Auditing Risk Culture

Auditing Risk Culture

DevSecOps Guide

ATTACKING PHP APPLICATIONS

ATTACKING PHP APPLICATIONS

DevSecOps Guide

ATTACKING KUBERNETES WITH SECURITY BEST PRACTICE

ATTACKING KUBERNETES WITH SECURITY BEST PRACTICE

CLTC WHITE PAPER SERIES

Guidance for the Development of AI Risk and Impact Assessments

Guidance for the Development of AI Risk and Impact Assessments

Active Directory

Active Directory IT AuditChecklist

Active Directory IT AuditChecklist

A guide to business continuity planning

A guide to business continuity planning

Using MITRE ATT&CK™ in Threat Huntingand Detection

Using MITRE ATT&CK™ in Threat Huntingand Detection

H2 2023 – A brief overviewof main incidentsin industrial cybersecurity

H2 2023 – A brief overviewof main incidentsin industrial cybersecurity

Andrey Prozorov

24 Great Cybersecurity Frameworks

24 Great Cybersecurity Frameworks

SEGURIDAD DE TELECOMUNICACIONES

SEGURIDAD DE TELECOMUNICACIONES

Project Management Institute

Building Resilience Through Strategic Risk Management

Building Resilience Through Strategic Risk Management

DATA LOSS PREVENTION (DLP)

DATA LOSS PREVENTION (DLP)

Cybersecurity Red Team

Cybersecurity Red Team

Cyber Incident Response

Cyber Incident Response

CSR Cyber Security Council

EVERY BUSINESS HAS DUTIES OF CARE IN THE FIELD OF CYBER SECURITY

EVERY BUSINESS HAS DUTIES OF CARE IN THE FIELD OF CYBER SECURITY

Cybersecurity ESSENTIALS

Cybersecurity ESSENTIALS

Agency for Digital Government

Cyber security in supplier relation ships

Cyber security in supplier relation ships

Curso de introducción KALI LINUX PARA HACKERS ÉTICOS

Curso de introducción KALI LINUX PARA HACKERS ÉTICOS

PRACTICE GUIDE GDPR

PRACTICE GUIDE GDPR