Legitimate Apps as Traitorware for Persistent Microsoft
The idea of “persistence” in a cloud environment is not a well-studied topic. At most, you hear instances of the attacker creating backup logins to…
Category: ThreatIntelligence-IncidentResponse
Elastic Conversational Entity Analytics for threat hunting — Elastic Security Labs
Entity Analytics is a core security analytics capability that extends Elastic Security from event-centric to entity-centric investigation. By focusing on critical entities, such as users,…
Another PaperCut: CVE-2023-39143 Remote Code Execution
On August 5, Huntress was made aware of the recently uncovered vulnerability tracked as CVE-2023-39143. For overall statistics, in our partner base we have over…
How Businesses Should Be Scaling Their Security
Small and medium businesses are changing their security stance for the better. There are still some stragglers, but they tend to be brought forward by…
How Security-Centric Procedures and Training Helped
On August 7, 2023, Huntress caught a business email compromise (BEC) that would have scammed us out of more than $100,000 had it gone undetected.…
Identity: The Third Phase of Security Operations
Information security has long been divided into two primary disciplines: host-based and network-focused endeavors. While some sub-disciplines emerged over time, such as application or cloud…
Investigating New INC Ransom Group Activity
The Huntress team is always keeping our eye on the evolving threat landscape. Now, it seems that a new contender, referred to as “INC” has…
Traditional Antivirus vs. Managed Antivirus
Having an antivirus program is like having a lock on your front door—it’s a basic step and foundation for your overall security posture. However, they…
Gone Phishing: An Analysis of a Targeted User Attack
In the early days of information security, it was relatively easy to spot a phishing email in your inbox. A lot of the security awareness…
Ask the Mac Guy: macOS Security Myths
Hi, I’m a Mac guy! Over the past year, I’ve received many questions from people—sales people, technical people, directors and executives, end users like my…
Best Practices to Reduce Your Attack Surface
In a recent episode of Tradecraft Tuesday, Huntress’ UK ThreatOps Center Manager Dray Agha and Senior Incident Responder Harlan Carvey discussed the need to leverage…
Threat Hunting and Tactical Malware Analysis
What are the basics of threat hunting and malware analysis? Our experts sought to answer this burning question in a recent episode of Tradecraft Tuesday,…