The Russia-linked APT29 nation-state actor has been found leveraging a “lesser-known” Windows feature called Credential Roaming as part of its attack against an unnamed European diplomatic entity.
“The diplomatic-centric targeting is consistent with Russian strategic priorities as well as historic APT29 targeting,” Mandiant researcher Thibault Van Geluwe de Berlaere said in a technical write-up.
Related Post
- November 14, 2024
Experts Uncover 70,000 Hijacked Domains in Widespread ‘Sitting
Multiple threat actors have been found taking advantage of an attack technique called Sitting Ducks to hijack legitimate domains for
- November 14, 2024
ShrinkLocker ransomware: what you need to know
What is ShrinkLocker? ShrinkLocker is a family of ransomware that encrypts an organisation’s data and demands a ransom payment in
- November 14, 2024
Google Warns of Rising Cloaking Scams, AI-Driven Fraud,
Google has revealed that bad actors are leveraging techniques like landing page cloaking to conduct scams by impersonating legitimate sites.
- November 14, 2024
5 BCDR Oversights That Leave You Exposed to
Ransomware isn’t just a buzzword; it’s one of the most dreaded challenges businesses face in this increasingly digitized world. Ransomware