Do Son Rhysida ransomware is abusing Microsoft Trusted Signing to deploy OysterLoader (IAT) via Bing/Teams malvertising. The gang leveraged 40+ certificates to sign malware, bypassing security filters.
Rhysida
Intrinsec reveals shared infrastructure between Eye Pyramid C2 and ransomware groups like Rhysida and Vice Society in new threat intelligence report.
Uncover the TAG-124 traffic distribution system used by cybercriminals to spread malware, phishing pages, and fake browser updates.
Uncover the use of Azure Storage Explorer and AzCopy by ransomware groups for exfiltrating and storing data in Azure Blob cloud storage.