Showing posts with label black-hat actor. Show all posts
Showing posts with label black-hat actor. Show all posts

Friday, September 23, 2016

Russian Agency Looking to Hire a Black-Hat Hacker


Roskomnadzor (Russian censor agency) posted a vacancy for a hacker with black-hat experience who is ready to travel overseas and extract data from other people’s computers and networks. While it's a common practice to hire people with some offensive skills for protection purposes we might see yet another agency in Russia becoming offensive in cyber.






Publication date:                      23 September 2016
Handling requirements:            Traffic light protocol (TLP) GREEN
Attribution/Threat Actors:        Russian, Roskomnadzor
Actor Type:                               Tier V  
Potential Targets:                     Computer networks on Russia-controlled territories, also
                                                 possibly hosting computers worldwide
Past Reporting:                          None

The full attribution report has been published in its entirety in the Red Sky Alliance portal.  For more information please contact the lab directly at 844-4-WAPACK, 603-606-1246, or feedback@wapacklabs.com.

About Wapack Labs

Wapack Labs, located in New Boston, NH is a Cyber Threat Analysis and Intelligence organization supporting the Red Sky Alliance, the FS-ISAC and individual organizations by offering expert level targeted intelligence analysis answering some of the hardest questions in Cyber.  Wapack Labs’ engineers, researchers and analysts use deep analysis techniques and visualization to design and deliver transformational cyber-security analysis tools that fuse open source and proprietary information.  The intelligence derived from these tools and techniques serve as the foundation of Wapack Labs’ information reporting to the cyber-security teams of its customers and industry partners located around the world.

Thursday, August 11, 2016

2016 IT Hacker


On 9 August 2016, OSINT research was collected identifying a potential black hat actor who was placing and testing a Remote Access Trojan (DarkComet) through his domain.  This is an attempt to set a questionable keylogger operation onto unsuspecting victim computers.  We are providing this information for your situational awareness.





Publication date:  10 August 2016
Handling requirements:  Traffic light protocol (TLP) GREEN
Attribution/Threat Actors:  OSINT – Gleaces Juvilian
Actor Type:  Tier I
Potential Targets:  USA / International

This report was published in its entirety to the Financial Services ISAC and Red Sky Alliance portal on August 10, 2016.  For more information, contact Wapack Labs at 844-4-WAPACK.