NEWS
Cybereason exposes Iranian state-sponsored cyber-espionage campaign
The report , titled Operation GhostShell : Novel RAT Targets Global Aerospace and Telecoms Firms , details the stealthy attacks against companies in the Middle East , United States , Europe and Russia .
Cybereason , a leader in operationcentric attack protection , has published a new threat intelligence report that unmasks a cyber-espionage operation targeting global aerospace and telecommunications companies .
The report identifies a newly discovered Iranian threat actor behind the attacks dubbed MalKamak that has been operating since at least 2018 and remained unknown until recently .
In addition , the still-active campaign leverages a very sophisticated and previously undiscovered Remote Access Trojan ( RAT ) dubbed ShellClient that evades antivirus tools and other security apparatus and abuses the public cloud service Dropbox for command and control ( C2 ).
“ The Operation GhostShell Report revealed a complex RAT capable of evading detection since as early as 2018 , and the recent DeadRinger Report also uncovered a similarly evasive threat from as early as 2017 , which tells us a lot about how advanced attackers are continuously defeating security solutions ,” said Cybereason CEO and Co-founder , Lior Div .
“ Layering on more tools to produce even more alerts that overwhelm defenders is not helping us stop sophisticated attacks , which is why Cybereason takes an operationcentric approach that detects based on very subtle chains of behavior where the adversary ’ s own actions work against them to reveal the attack at the earliest stages .”
Mandiant Academy launched to provide security teams with training
Mandiant , a leader in dynamic cyberdefense and response , has announced its new training program called Mandiant Academy .
Leveraging Mandiant ’ s leading threat intelligence and cybersecurity expertise , the program provides education courses , incident response and threat intelligence analysis certifications and operational skills training to meet the shifting needs of security teams today .
Delivered by frontline industry experts , Mandiant Academy is designed to help close the cybersecurity skills gap by maturing security teams ’ on-the-job capabilities and improving their ability to prevent , detect and respond to today ’ s evolving threat actors .
Mandiant Academy helps ensure that cybersecurity practitioners are equipped with the right skillsets and latest knowledge on the attacker landscape to be even greater assets to their organizations before , during and after an incident .
“ We ’ re thrilled to provide a subset of our members this robust program and access to in-depth training from the cybersecurity experts fighting sophisticated attackers every day ,” said Tom Marsland , Board Chairman at VetSec .
“ At VetSec , we work with veterans to help them continue to excel or transition out of the military and secure careers in IT and cybersecurity . This includes providing the best , free resources like Mandiant Academy .”
16 INTELLIGENTCIO NORTH AMERICA www . intelligentcio . com