Threat Trends: UNC961 and How Managed Defense Approaches Threat Hunting

Update: 2023-05-26

Description

Ryan Tomcik, Dan Fenwick, and Tim Martin join host Luke McNamara to discuss how Managed Defense conducts proactive hunting, illustrated by several UNC961 intrusions.

For more, please see: https://www.mandiant.com/resources/blog/unc961-multiverse-financially-motivated

Follow Ryan @heferyzan and Tim @Sa1jak on Twitter.

Comments

In Channel

UNC5221 and the BRICKSTORM Campaign

2025-10-2226:11

How vSphere Became a Target for Adversaries

2025-09-1539:01

AI Tools and Sentiment Within the Underground Cyber Crime Community

2025-08-1825:44

Protecting the Core: Securing Protection Relays in Modern Substations

2025-07-2843:05

The Rise of ClickFix

2025-07-1523:33

Vishing in the Wild

2025-06-0437:48

Responding to a DPRK ITW Incident

2025-05-1916:35

UNC5221 and The Targeting of Ivanti Connect Secure VPNs

2025-05-0527:55

Windows Remote Desktop Protocol: Remote to Rogue

2025-04-1434:27

Cybersecurity Conversations with the C-Suite and Board

2025-03-1036:14

What to Watch For in 2025

2025-02-2844:31

Signals of Trouble

2025-02-1926:03

Agentic AI in Cybersecurity

2025-02-0526:40

The Art of Remediation in Incident Response

2024-12-0240:59

How to Run an Effective Tabletop Exercise

2024-10-1829:14

Using LLMs to Analyze Windows Binaries

2024-10-0436:40

How Threat Actors Bypass Multi-Factor Authentication

2024-09-2627:20

TAG's Work Tracking Commercial Surveillance Vendors

2024-09-0423:58

What Iranian Threat Actors Have Been Up To This Year

2024-07-2536:13

Mandiant's Approach to Securely Using AI Solutions

2024-06-2732:00

00:00

1.0x

Threat Trends: UNC961 and How Managed Defense Approaches Threat Hunting

#box-pro-ellipsis-176256409219175{-webkit-line-clamp:2;}Threat Trends: UNC961 and How Managed Defense Approaches Threat Hunting

Threat Trends: UNC961 and How Managed Defense Approaches Threat Hunting

Mandiant

Threat Trends: UNC961 and How Managed Defense Approaches Threat Hunting