#DarkGate gained popularity among threat actors (e.g: #TA577, #DuckTail), our #RE analysis details the internals of the malware, how it implements technique to evade defenses: Union-API, token theft via UpdateProcThreadAttribute, APC injection.
blog.sekoia.io/darkgate-int...
blog.sekoia.io/darkgate-int...
November 20, 2023 at 1:02 PM
#DarkGate gained popularity among threat actors (e.g: #TA577, #DuckTail), our #RE analysis details the internals of the malware, how it implements technique to evade defenses: Union-API, token theft via UpdateProcThreadAttribute, APC injection.
blog.sekoia.io/darkgate-int...
blog.sekoia.io/darkgate-int...
#TA577 is a messy b that lives for drama. Learn more about their wild attack chain we spotted attempting to steal NTLM data. Great work by the team, esp Tommy and Kelsey www.proofpoint.com/us/blog/thre...
TA577’s Unusual Attack Chain Leads to NTLM Data Theft | Proofpoint US
What happened Proofpoint identified notable cybercriminal threat actor TA577 using a new attack chain to demonstrate an uncommonly observed objective: stealing NT LAN Manager (NTLM) authentication...
www.proofpoint.com
March 4, 2024 at 8:09 PM
#TA577 is a messy b that lives for drama. Learn more about their wild attack chain we spotted attempting to steal NTLM data. Great work by the team, esp Tommy and Kelsey www.proofpoint.com/us/blog/thre...
2025 @Netskope Threat Labs Report highlights:
⛈️8.4 out of 1,000 users click a #phishing link
⛈️#Cloud apps top target
⛈️GitHub most abused app to deliver #malware
⛈️#GenAI adoption continues to increase
⛈️TA577, UAC-0050 & Salt Typhoon most active actors
www.netskope.com/resources/re...
⛈️8.4 out of 1,000 users click a #phishing link
⛈️#Cloud apps top target
⛈️GitHub most abused app to deliver #malware
⛈️#GenAI adoption continues to increase
⛈️TA577, UAC-0050 & Salt Typhoon most active actors
www.netskope.com/resources/re...
January 8, 2025 at 9:24 AM
2025 @Netskope Threat Labs Report highlights:
⛈️8.4 out of 1,000 users click a #phishing link
⛈️#Cloud apps top target
⛈️GitHub most abused app to deliver #malware
⛈️#GenAI adoption continues to increase
⛈️TA577, UAC-0050 & Salt Typhoon most active actors
www.netskope.com/resources/re...
⛈️8.4 out of 1,000 users click a #phishing link
⛈️#Cloud apps top target
⛈️GitHub most abused app to deliver #malware
⛈️#GenAI adoption continues to increase
⛈️TA577, UAC-0050 & Salt Typhoon most active actors
www.netskope.com/resources/re...
Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes
Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes
Beware of ZIP attachments in emails! TA577's new phishing tactic aims to steal NTLM hashes, posing a serious threat to enterprise security.
thehackernews.com
March 5, 2024 at 10:43 AM
Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes
東急バス川32系統川崎駅ラゾーナ広場～河原町団地前～戸手アパート前～東芝前～鹿島田～平間駅入口～武蔵小杉駅東口行きTA577(三菱新型ノンステップバス)
東急バス2026年式黒サッシ三菱新型ノンステップバスに再び乗車！
東急バス2026年式黒サッシ三菱新型ノンステップバスに再び乗車！
August 1, 2026 at 3:30 PM
東急バス川32系統川崎駅ラゾーナ広場～河原町団地前～戸手アパート前～東芝前～鹿島田～平間駅入口～武蔵小杉駅東口行きTA577(三菱新型ノンステップバス)
東急バス2026年式黒サッシ三菱新型ノンステップバスに再び乗車！
東急バス2026年式黒サッシ三菱新型ノンステップバスに再び乗車！
Phishing-Angriffe von TA577 auf Schwachstelle CVE-2024-21413 (Exchange)
www.borncity.com/blog/2024/03...
www.borncity.com/blog/2024/03...
Telekom und CERT-Bayern beobachten Phishing-Angriffe von TA577 auf Schwachstelle CVE-2024-21413
Die Telekom und das CERT-Bayern haben Ende Februar 2024 eine Phishing-Kampagne des Angreifers TA577 beobachtet, die gezielt auf eine Outlook-Schwachstelle CVE-2024-21413 ausgerichtet ist. Über...
www.borncity.com
March 5, 2024 at 10:11 AM
Phishing-Angriffe von TA577 auf Schwachstelle CVE-2024-21413 (Exchange)
www.borncity.com/blog/2024/03...
www.borncity.com/blog/2024/03...
At least two campaigns taking advantage of this approach were observed on February 26 and 27, 2024, the company added. The phishing waves disseminated thousands of messages and targeted hundreds of organizations across the world. thehackernews.com/2024/03/warn...
Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes
Beware of ZIP attachments in emails! TA577's new phishing tactic aims to steal NTLM hashes, posing a serious threat to enterprise security.
thehackernews.com
March 5, 2024 at 12:36 PM
At least two campaigns taking advantage of this approach were observed on February 26 and 27, 2024, the company added. The phishing waves disseminated thousands of messages and targeted hundreds of organizations across the world. thehackernews.com/2024/03/warn...
TA577 Attacking Hundreds of Organizations to Steal NTLM Authentication Data
TA577 Attacking Hundreds of Organizations to Steal NTLM Authentication Data
TA577 has been identified as employing a new attack strategy aimed at stealing NT LAN Manager (NTLM) authentication information.
cybersecuritynews.com
March 5, 2024 at 12:13 PM
TA577 Attacking Hundreds of Organizations to Steal NTLM Authentication Data
Hackers steal Windows NTLM authentication hashes in phishing attacks
Hackers steal Windows NTLM authentication hashes in phishing attacks
The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks.
www.bleepingcomputer.com
March 4, 2024 at 9:57 PM
Hackers steal Windows NTLM authentication hashes in phishing attacks
February 3, 2026 at 4:11 AM
TA577’s Unusual Attack Chain Leads to NTLM Data Theft #Security
TA577’s Unusual Attack Chain Leads to NTLM Data Theft
dlvr.it
March 10, 2024 at 5:23 AM
TA577’s Unusual Attack Chain Leads to NTLM Data Theft #Security
Advertencia: Ataque de Hijacking se dirige a redes de TI y roba hashes NTLM.
TA577 utiliza archivos adjuntos ZIP en e-mails de phishing, y puede usarse para recopilación de información confidencial y permitir actividades de seguimiento. #ciberseguridad #cybersecurity
TA577 utiliza archivos adjuntos ZIP en e-mails de phishing, y puede usarse para recopilación de información confidencial y permitir actividades de seguimiento. #ciberseguridad #cybersecurity
Advertencia: Ataque de Hijacking se dirige a redes de TI y roba hashes NTLM
Se ha observado que el actor de amenazas conocido como TA577 utiliza archivos adjuntos ZIP en correos electrónicos de phishing con el objetivo de robar hashes de NT LAN Manager ( NTLM ). La nueva
blog.ehcgroup.io
March 5, 2024 at 9:42 PM
Advertencia: Ataque de Hijacking se dirige a redes de TI y roba hashes NTLM.
TA577 utiliza archivos adjuntos ZIP en e-mails de phishing, y puede usarse para recopilación de información confidencial y permitir actividades de seguimiento. #ciberseguridad #cybersecurity
TA577 utiliza archivos adjuntos ZIP en e-mails de phishing, y puede usarse para recopilación de información confidencial y permitir actividades de seguimiento. #ciberseguridad #cybersecurity
#Hack / #Sécurité - attaque d'authentification Windows par e-mail d'hameçonnage qui peut déclencher d'autres leaks de datas personnelles & mots de passe :
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Hackers steal Windows NTLM authentication hashes in phishing attacks
The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks.
www.bleepingcomputer.com
March 5, 2024 at 3:16 PM
#Hack / #Sécurité - attaque d'authentification Windows par e-mail d'hameçonnage qui peut déclencher d'autres leaks de datas personnelles & mots de passe :
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Furto di hash NTLM: Le email di phishing di TA577: Il collettivo di cybercriminali TA577 intensifica le campagne di phishing per carpire hash NTLM. Il mondo della cyber security si trova costantemente a dover affrontare nuove sfide. Le recenti attività del gruppo cybercriminale TA577 incarnano…
Furto di hash NTLM: Le email di phishing di TA577
Il collettivo di cybercriminali TA577 intensifica le campagne di phishing per carpire hash NTLM. Il mondo della cyber security si trova costantemente a dover affrontare nuove sfide. Le recenti attività del gruppo cybercriminale TA577 incarnano…
www.remoteitalia.com
March 5, 2024 at 9:04 AM
Furto di hash NTLM: Le email di phishing di TA577: Il collettivo di cybercriminali TA577 intensifica le campagne di phishing per carpire hash NTLM. Il mondo della cyber security si trova costantemente a dover affrontare nuove sfide. Le recenti attività del gruppo cybercriminale TA577 incarnano…
[BleepingComputer]Hackers steal Windows NTLM authentication hashes in phishing attacks - BleepingComputer The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks.
March 6, 2024 at 8:15 AM
[BleepingComputer]Hackers steal Windows NTLM authentication hashes in phishing attacks - BleepingComputer The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks.
"Hackers steal #Windows NTLM authentication hashes in phishing attacks"
"The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks."
www.bleepingcomputer.com/news/securit...
"The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks."
www.bleepingcomputer.com/news/securit...
March 7, 2024 at 1:33 PM
"Hackers steal #Windows NTLM authentication hashes in phishing attacks"
"The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks."
www.bleepingcomputer.com/news/securit...
"The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks."
www.bleepingcomputer.com/news/securit...
Hackers steal #Windows NTLM authentication hashes in phishing attacks ⚠️
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Hackers steal Windows NTLM authentication hashes in phishing attacks
The hacking group known as TA577 has recently shifted tactics by using phishing emails to steal NT LAN Manager (NTLM) authentication hashes to perform account hijacks.
www.bleepingcomputer.com
March 4, 2024 at 9:54 PM
Hackers steal #Windows NTLM authentication hashes in phishing attacks ⚠️
www.bleepingcomputer.com/news/securit...
www.bleepingcomputer.com/news/securit...
Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes
#thehackersnews
#thehackersnews
Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes
Beware of ZIP attachments in emails! TA577's new phishing tactic aims to steal NTLM hashes, posing a serious threat to enterprise security.
thehackernews.com
March 5, 2024 at 10:40 AM
Warning: Thread Hijacking Attack Targets IT Networks, Stealing NTLM Hashes
#thehackersnews
#thehackersnews