mattdahl

Widespread DNS Hijacking Activity Targets Multiple Sectors

Widespread DNS Hijacking Activity Targets Multiple Sectors

January 25, 2019

mattdahl Threat Hunting & Intel

CrowdStrike® Intelligence™ has been researching reports of widespread DNS hijacking activity since information on the attacks became publicly available earlier this month.1 The information allowed for[…]

Sakula Reloaded

Sakula Reloaded

November 18, 2015

mattdahl Threat Hunting & Intel

Often during the investigation of sophisticated threat actors, the demarcation between the different attackers and campaigns are blurry. Researchers need to rely on tradecraft and analytic rigor to un[…]

I am Ironman: DEEP PANDA Uses Sakula Malware to Target Organizations in Multiple Sectors

I am Ironman: DEEP PANDA Uses Sakula Malware to Target Organizations in Multiple Sectors

November 24, 2014

mattdahl Threat Hunting & Intel

Over the last few months, the CrowdStrike Intelligence team has been tracking a campaign of highly targeted events focused on entities in the U.S. Defense Industrial Base (DIB), healthcare, government[…]

Cat Scratch Fever: CrowdStrike Tracks Newly Reported Iranian Actor as FLYING KITTEN

Cat Scratch Fever: CrowdStrike Tracks Newly Reported Iranian Actor as FLYING KITTEN

May 13, 2014

mattdahl Threat Hunting & Intel

Today, our friends at FireEye released a report on an Iran-based adversary they are calling Saffron Rose. CrowdStrike Intelligence has also been tracking and reporting internally on this threat group […]

    Created with Sketch.
    See CrowdStrike Falcon® in Action

    Detect, prevent, and respond to attacks— even malware-free intrusions—at any stage, with next-generation endpoint protection.

    See Demo