Threat Trends: APT by USB

The Defender's Advantage Podcast

Content provided by Mandiant and FireEye Inc. All podcast content including episodes, graphics, and podcast descriptions are uploaded and provided directly by Mandiant and FireEye Inc or their podcast platform partner. If you believe someone is using your copyrighted work without your permission, you can follow the process outlined here https://player.fm/legal.

1+ y ago 28:20

MP3•Episode home

In this week’s episode of The Defender’s Advantage Podcast, Threat Trends host Luke McNamara is joined by Mandiant analysts Tyler McLellan and John Wolfram for a discussion on the usage of USB as an infection vector as described in two recent Mandiant blog posts.
Tyler details the activity outlined in the most recent blog on a new cyber espionage operation attributed to Turla Team (UNC4210), distributing the KOPILUWAK reconnaissance utility and QUIETCANARY backdoor to ANDROMEDA malware victims in Ukraine. John then jumps in to discuss another blog from late 2022 on cyber espionage activity from UNC4191 heavily leveraging USB devices as an initial infection vector, concentrated on the Philippines.
Read the blog, Turla: A Galaxy of Opportunity at https://mndt.info/3jPAeRI.
Read the blog, Always Another Secret: Lifting the Haze on China Nexus Espionage in Southeast Asia at https://mndt.info/3ATQB5n.
You can follow Tyler McLellan at @tylabs and John Wolfram at @Big_Bad_W0lf_.

Don’t forget to rate, review and subscribe to The Defender’s Advantage Podcast where you listen to podcasts.

173 episodes

#Cyber #Cybersecurity #Security #Tech #Software Development #Threat Intelligence #Cyber Threats #Threat Landscape #Threat Intel #Mandiant #FireEye