Part 1: Investigation Report on New APT Organization MurenShark: Torpedoes Fired to Turkish Navy [1] Characteristics of Attack Tactics Use compromised sites: MurenShark tends to use compromised sites as the file server and the C&C server in the attack process. As shown in the last chapter, the organization used the...
Blog
Investigation Report on New APT Organization MurenShark: Torpedoes Fired to Turkish Navy [1]
Overview In 2022 Q2, NSFOCUS Security Labs detected a series of cyberattacks against Turkey. After analysis, the researchers confirmed that this round of attacks originated from Actor210426, a new threat entity identified by NSFOCUS Security Labs in April 2021. Through the clues of behavior pattern, attack method, attack tool, attack...
Configuring Collaboration Between ADS M and NTA
ADS M can manage NTAs, including checking NTA running status, time synchronization, dispatching IP group configuration of a region, displaying traffic information of NTAs, and receiving logs uploaded from NTAs. The steps to configure the collaboration between ADS M and NTA are as follows: Configuring NTA Step 1: Choose Administration...
SiS Cyber Security Solution Month
SiS Cyber Security Solution Month kicked off in Kwun Tong District, Hong Kong in August. NSFOCUS was invited to join this partner event. Kings Leung shared the topic "Be Prepared - Cyber Security Laws" at this event. SiS International Limited is one of the largest value-added distributors in HK. NSFOCUS and SiS have been in a good partnership since...
Description of NIPS Discarding Jumbo Frames in MPLS Traffic by Default
When there is MPLS traffic in the network, there may be jumbo frames whose layer 2 packet including the CRC code has a length greater than 1518 bytes. The NIPS network interface card directly discards these jumbo frames by default, causing network failure. Perform the following check on the client...
NSFOCUS ISOP Listed in The Security Analytics Platform Landscape Report
Santa Clara, Calif. August 24, 2022 – We are very happy to announce that NSFOCUS was included as one of notable vendors in the report The Security Analytics Platform Landscape, Q3 2022 published by Forrester, an authoritative international research consulting organization. “Security analytics platforms are the center of the SOCâ€, as...
