This weeks' briefing covers:

00:00 - Intro and Situational Awareness

3:22 - Threat Actors Use CrowdStrike Outage for Phishing and Malware Distribution

9:32 - KTA116 (ANDARIEL) Joint Advisory Released

12:00 - Malware Spotlight: MACMA

14:22 - Ransomware Roundup

Dive deeper:

Addressing The CrowdStrike Outage: https://www.kroll.com/en/insights/publications/cyber/addressing-crowdstrike-outage

Novel Technique Combination Used In IDATLOADER Distribution: https://www.kroll.com/en/insights/publications/cyber/idatloader-distribution

PLAY Ransomware Group Gains Access via Citrix Bleed Vulnerability: https://www.kroll.com/en/insights/publications/cyber/play-ransomware-gains-access-citrix-bleed-vulnerability

Playlist of Kroll's Weekly Cyber Threat Intelligence Briefings: Cyber Threat Intelligence Briefings

Kroll Cyber Blog: https://www.kroll.com/en/insights/publications/cyber

Kroll Cyber Threat Intelligence: https://www.kroll.com/en/services/cyber-risk/managed-security/threat-intelligence-services

Kroll Threat Intelligence Reports: https://www.kroll.com/en/insights/publications/cyber/threat-intelligence-reports

Kroll Responder MDR: https://www.kroll.com/en/services/cyber-risk/managed-security/kroll-responder

#krollcyber #threatintelligence #cyberthreats