Adwind RAT Rebranding
In November, 2013, the popular and widely used Java RAT named Adwind began being sold under the new name UNRECOM…
VICEROY TIGER Delivers New Zero-Day Exploit
On November 5, 2013, Microsoft announced that a vulnerability in the Microsoft Graphics Component could allow Remote Code Execution (RCE). This announcement…
Mitigating Pass the Hash (PtH)
To look back one year in the life of technology is a long time, so 16 years could be considered…
DNS – The Lifeblood of your Domain
As the situation on the ground in Syria continues to deteriorate, the Syrian Electronic Army (SEA) has made quite a…
Attending Black Hat USA 2013?
Attending Black Hat USA 2013? From briefings and trainings to adversary detections and book signings, CrowdStrike will be there in…
Rare Glimpse into a Real-Life Command-and-Control Server
Recently, CrowdStrike has been tracking the activities of an adversary we’ve named Viceroy Tiger. During our research, we happened upon…
Department of Labor Strategic Web Compromise
On April 30, 2013, CrowdStrike was alerted to a strategic web compromise on a US Department of Labor website that…
Who is Samurai Panda
This week we’re back to our old friends with a Chinese nexus. To recount the last few weeks of our…
Who is Clever Kitten
Over the last several weeks, CrowdStrike has been discussing some of the dozens of adversaries that the CrowdStrike Intelligence team…
Whois Numbered Panda
Last week's Intelligence blog post featured Anchor Panda, one of the many adversary groups that CrowdStrike tracks. The adversary is…