Enterprise Technical Security That Matters - April 23, 2021

Iron Tiger APT Group Roars Louder With New Toolkit

Iron Tiger, a threat actor group, has upgraded its toolkit with an updated SysUpdate malware variant. Recently, research from Trend Micro shed light on one of the group’s tools that hides files at the kernel level. This new malware variant is now using more files in its infection routine, with some updated tactics. By Cyware Alerts I April 20, 2021

Mozilla Fixes Firefox Flaw That Allowed Spoofing of HTTPS Browser Padlock

The Mozilla Foundation fixed a flaw in its Firefox browser that allowed spoofing of the HTTPS secure communications icon, displayed as a padlock in the browser address window. Successful exploitation of the flaw could have allowed a rogue website to intercept browser communications. By Tom Spring I April 20, 2021

New Tactics Provide Invisibility Cloak to Ransomware Attacks

Ransomware operators are increasingly using new tactics and strategies to make their attacks more effective. This includes new methods of putting more pressure on victims, such as the use of the double extortion technique, as well as new business tactics such as cartel formation. By Cyware Alerts I April 21, 2021