Resource Center

CXO Fraud - Scam emails originating from Virgin Media, Optimum and Cox.net

February 24, 2022

There is an ongoing scam email campaign targeting executives from prominent organizations around the world. These reported email addresses on the domains are genuine email accounts of 'Virgin Media', 'Optimum' & 'Cox communications' users' which are…

CTM360 Hardening Guidelines

January 11, 2022

USE CASE: POST-EXPLOITATION IMPACT OF LOG4JSHELL VULNERABILITY Log4j vulnerability (CVE-2021-44228) allows unauthenticated remote code execution, and is triggered when a specially crafted string provided by the attacker, through a variety of…

Mitre Att&ck Mapping & Hardening Guidelines

November 25, 2021

USE CASE: RYUK RANSOMWARE Threat Description Ryuk is a ransomware designed to target enterprise environments that has been used in attacks since at least 2018. Ryuk shares code similarities with Hermes ransomware. Typically Ryuk has been deployed as…

SquirrelWaffle – Malicious Email Campaign

November 08, 2021

Threat Description CTM360 has observed increased activity in propagation of SquirrelWaffle, a malware loader that is being actively spread via email campaigns. This new threat is using malicious Microsoft Excel and Word documents to deliver Qakbot…

WhatsApp Account Hijacking

February 14, 2021

CTM360 has observed a sudden rise in Whatsapp accounts being hijacked in the MENA Region. In most cases, this occurs through social engineering, in which the victim would receive a Whatsapp message or phone call; they are usually requested to provide…