Go offline with the Player FM app!
Threat Trends: APT by USB
Manage episode 352953757 series 1169368
In this week’s episode of The Defender’s Advantage Podcast, Threat Trends host Luke McNamara is joined by Mandiant analysts Tyler McLellan and John Wolfram for a discussion on the usage of USB as an infection vector as described in two recent Mandiant blog posts.
Tyler details the activity outlined in the most recent blog on a new cyber espionage operation attributed to Turla Team (UNC4210), distributing the KOPILUWAK reconnaissance utility and QUIETCANARY backdoor to ANDROMEDA malware victims in Ukraine. John then jumps in to discuss another blog from late 2022 on cyber espionage activity from UNC4191 heavily leveraging USB devices as an initial infection vector, concentrated on the Philippines.
Read the blog, Turla: A Galaxy of Opportunity at https://mndt.info/3jPAeRI.
Read the blog, Always Another Secret: Lifting the Haze on China Nexus Espionage in Southeast Asia at https://mndt.info/3ATQB5n.
You can follow Tyler McLellan at @tylabs and John Wolfram at @Big_Bad_W0lf_.
Don’t forget to rate, review and subscribe to The Defender’s Advantage Podcast where you listen to podcasts.
173 episodes
Manage episode 352953757 series 1169368
In this week’s episode of The Defender’s Advantage Podcast, Threat Trends host Luke McNamara is joined by Mandiant analysts Tyler McLellan and John Wolfram for a discussion on the usage of USB as an infection vector as described in two recent Mandiant blog posts.
Tyler details the activity outlined in the most recent blog on a new cyber espionage operation attributed to Turla Team (UNC4210), distributing the KOPILUWAK reconnaissance utility and QUIETCANARY backdoor to ANDROMEDA malware victims in Ukraine. John then jumps in to discuss another blog from late 2022 on cyber espionage activity from UNC4191 heavily leveraging USB devices as an initial infection vector, concentrated on the Philippines.
Read the blog, Turla: A Galaxy of Opportunity at https://mndt.info/3jPAeRI.
Read the blog, Always Another Secret: Lifting the Haze on China Nexus Espionage in Southeast Asia at https://mndt.info/3ATQB5n.
You can follow Tyler McLellan at @tylabs and John Wolfram at @Big_Bad_W0lf_.
Don’t forget to rate, review and subscribe to The Defender’s Advantage Podcast where you listen to podcasts.
173 episodes
All episodes
×Welcome to Player FM!
Player FM is scanning the web for high-quality podcasts for you to enjoy right now. It's the best podcast app and works on Android, iPhone, and the web. Signup to sync subscriptions across devices.