Threat Actor with Diverse Malware Toolset

Analysis of Wapack Labs CyberWatch® data have led to the identification of a sophisticated threat actor with a diverse malware toolset. This report is being provided for your situational awareness.

• Leverages a wide variety of malware

• Targeting remains unknown at this time

• Collected data indicates the threat actor is capable of reverse engineering malicious tools...READ MORE

Publication Date: 30 December 2016
Handling Requirements: Traffic light protocol (TLP) GREEN
Attribution/Threat Actors: Oldstealer
Actor Type: Adversary capabilities have been assessed as Tier III
Potential Targets: Numerous sectors
Past Reporting: N/A

The full report may be viewed in the Red Sky Alliance as DOC-4574. 
Contact Wapack Labs for more information.

AlphBay: DDoS-for-hire Service Author

AlphaBay Market is a well-known TOR based underground website that advertises, for sale, many malicious cyber tools and services. A known DDoS-for-hire service author has been operating in AlphaBay. Author claims to have successfully targeted multiple corporations. This information is being provided for your situational awareness.

• AlphaBay is hosted in The Onion Router (TOR) network.

• The AlphaBay Market is notorious for selling malicious cyber tools and services.

• DDoS-for-hire service author is a threat actor who provides malicious DDoS services.

Publication Date: 3 December 2016
Handling Requirements: Traffic light protocol (TLP) GREEN
Attribution/Threat Actor: DDoS-for-hire service author
Actor Type: Adversary capabilities have been assessed as Tier IV
Potential Targets: All; Distributed Denial of Service (DDoS) for hire provider
Past Reporting: DOC-4214