North Korea’s Stonefly, commodity malware, and the potential return of the REvil ransomware

Update: 2022-05-05

Description

In the latest Cyber Security Brief, Brigid O Gorman and Dick O’Brien discuss some of the recent research published by Symantec’s Threat Hunter Team, including our blog about the activity of North Korean APT group Stonefly, and our latest whitepaper on the topic of Commodity Malware. We also talk about some stories that were in the news over the last week or so, including the possible return of the REvil/Sodinokibi ransomware gang, a new loader called Bumblebee that might be a successor to BazarLoader, and a China-on-Russia intelligence-gathering attack.

Comments

In Channel

New Billbug campaign, Prestige ransomware, and multiple arrests of alleged cyber-crime gang members

2022-11-1725:38

Exbyte exfiltration tool, Cranefly uses new tools and novel technique, and OpenSSL bug is downgraded

2022-11-0320:42

Budworm espionage activity, Spyder Loader malware, and Ransom Cartel links to Sodinokibi

2022-10-2018:14

Witchetty espionage group activity, Microsoft Exchange Server zero days, and U.S. defense sector targeted by APT groups

2022-10-0627:50

Espionage activity targeting Asian governments, Webworm develops customized tools, and latest Noberus TTPs

2022-09-2225:24

Mobile app security, Russian invasion of Ukraine cyber impact continues, and Evil Corp switches focus

2022-09-0831:07

Bumblebee loader analysis, Raccoon Stealer returns, and LockBit launches a new version

2022-06-3023:17

BlackCat ransomware, Follina vuln used by Russian actors, and a new version of Metasploit

2022-06-1628:10

The Follina Microsoft Office vulnerability, Conti break-up, and more ransomware activity

2022-06-0226:10

Chinese cyber-espionage activity, Conti gang threatens Costa Rica government, and U.S. warns about North Korean citizens seeking jobs in IT

2022-05-1925:45

North Korea’s Stonefly, commodity malware, and the potential return of the REvil ransomware

2022-05-0531:58

Shuckworm targets Ukraine, Lazarus Dream Job campaign continues, and two dark marketplaces get taken down

2022-04-2127:42

Spring4Shell, Cicada campaign, new Verblecon malware, and Ukraine invasion cyber activity update

2022-04-0723:38

What you need to know about hacking group Lapsus$, cyber impacts of Ukraine invasion, and BazarBackdoor deploys new tactics

2022-03-2430:54

Daxin special: How this advanced malware was discovered

2022-03-1030:14

Hive and BlackByte ransomware, the money made by cyber criminals, and BEC scammers’ new tactics

2022-02-2423:33

FBI seizes $3.6 billion in cryptocurrency, cyber attacks against Ukraine continue, and financial organizations in Taiwan targeted

2022-02-1019:27

Ukraine cyber attacks, law enforcement activity, and a Noberus ransomware attack

2022-01-2727:23

BadUSB attacks, a new backdoor, and how one APT group managed to infect itself with malware

2022-01-1321:58

Log4j vulnerabilities, likely Iran-backed attacks on telecoms companies, and new Rust-based Noberus ransomware

2021-12-1628:17

00:00

1.0x

North Korea’s Stonefly, commodity malware, and the potential return of the REvil ransomware

#box-pro-ellipsis-176467281397856{-webkit-line-clamp:2;}North Korea’s Stonefly, commodity malware, and the potential return of the REvil ransomware

North Korea’s Stonefly, commodity malware, and the potential return of the REvil ransomware

North Korea’s Stonefly, commodity malware, and the potential return of the REvil ransomware