Videos

Elasticの2022年版グローバル脅威レポート：進化する最新の脅威を乗り切るためのロードマップ

2022年版Elasticグローバル脅威レポートのような脅威インテリジェンスに関する資料は、サイバーセキュリティの脅威を特定および防止するための組織の可視性、機能、専門知識を評価する上で欠かせません。

著者
Mandy Andress

Malware Analysis

See all

avatar

Not sleeping anymore: SOMNIRECORD's wake-up call

Elastic Security Labs researchers identified a new malware family written in C++ that we refer to as SOMNIRECORD. This malware functions as a backdoor and communicates with command and control (C2) while masquerading as DNS.

著者
Salim Bitam
avatar

NAPLISTENER: more bad dreams from developers of SIESTAGRAPH

Elastic Security Labs observes that the threat behind SIESTAGRAPH has shifted priorities from data theft to persistent access, deploying new malware like NAPLISTENER to evade detection.

著者
Remco Sprooten
avatar

Thawing the permafrost of ICEDID Summary

Elastic Security Labs analyzed a recent ICEDID variant consisting of a loader and bot payload. By providing this research to the community end-to-end, we hope to raise awareness of the ICEDID execution chain, capabilities, and design.

著者
Cyril François
Daniel Stepanic
avatar

Twice around the dance floor - Elastic discovers the PIPEDANCE backdoor

Elastic Security Labs is tracking an active intrusion into a Vietnamese organization using a recently discovered triggerable, multi-hop backdoor we are calling PIPEDANCE. This full-featured malware enables stealthy operations through the use of named

著者
Daniel Stepanic

Groups & Tactics

See all in Groups & Tactics

avatar

Exploring the QBOT Attack Pattern

In this research publication, we'll explore our analysis of the QBOT attack pattern — a full-featured and prolific malware family.

著者
Cyril François
Seth Goodwin
avatar

Okta and LAPSUS$: What you need to know

The latest organization under the microscope of the LAPSUS$ group is Okta. Threat hunt for the recent breach targeting Okta users using these simple steps in Elastic

著者
Jake King
avatar

Playing defense against Gamaredon Group

Learn about the recent campaign of a Russia-based threat group known as Gamaredon Group. This post will review these details and provide detection strategies.

著者
Daniel Stepanic
Andrew Pease
HalfCircle_TopRight_ContainerBoxLineGraph_ContainerBoxpattern-grey-boxes

Tools

NETWIRE Configuration Extractor
著者
Elastic Security Labs
ICEDID Configuration Extractor
著者
Elastic Security Labs
EMOTET Configuration Extractor
著者
Elastic Security Labs
PARALLAX Payload Extractor
著者
Elastic Security Labs
QBOT Configuration Extractor
著者
Elastic Security Labs

See all in Tools

Elastic Security Labs

Elastic Security Labs pairs research on emerging threats with analysis of strategic, operational, and tactical adversary objectives.

Learn more