Vendor
critical
threat
Qilin Ransomware Claims New Victim in Agriculture and Food Production Sector
2 rules 13 TTPs 156 IOCsThe Qilin ransomware group, active since July 2022 and utilizing Golang, has claimed a new victim, Danone (International Delights) in the US Agriculture and Food Production sector, employing double extortion tactics involving data encryption and threatened data release.
www.acosol.es +42
Qilin
+1
ransomware
double-extortion
golang
agriculture
food-production
2r
13t
156i
updated
high
advisory
EDRSilencer Execution Detected
3 rules 1 TTPThe EDRSilencer tool is designed to block outbound traffic of EDR processes by leveraging Windows Filtering Platform (WFP) APIs to evade endpoint defenses.
Microsoft Defender +2
edr
defense-evasion
windows
3r
1t
medium
advisory
LSASS Loading Suspicious DLL
2 rules 2 TTPs 9 IOCsDetection of LSASS loading an unsigned or untrusted DLL, which can indicate credential access attempts by malicious actors targeting sensitive information stored in the LSASS process.
Windows
credential-access
lsass
dll-injection
2r
2t
9i