Jérémy Scion is a Principal Threat Researcher on Sekoia’s Threat & Detection Research Team. He’s worked in cyber defense for nearly 15 years, including with the French Armed Forces, and now uses that experience to make sense of the network activity that can leave teams guessing.
ClickFix tactic: Revenge of detection
This blog post provides an overview of the observed Clickfix clusters and suggests detection rules based on an analysis of the various infection methods employed.
Hadooken and K4Spreader: The 8220 Gang's Latest Arsenal
On 17 September 2024, Sekoia’s Threat Detection & Research (TDR) team identified a notable infection chain targeting both Windows and Linux systems through our Oracle WebLogic honeypot.
Solving the 7777 Botnet enigma: A cybersecurity quest
Discover 7777 botnet (aka Quad7) and its activity, targets, and use of TP-Link routers in Microsoft 365 attacks in our latest investigation.
Mallox affiliate leverages PureCrypter in MS-SQL exploitation campaigns
Learn about the techniques used by the Mallox ransomware affiliate to compromise an MS-SQL server. Dive into our detailed technical analysis.
ActiveMQ CVE-2023-46604 exploited by Kinsing: Threat analysis
Discover a technical analysis of the exploitation of the CVE-2023-46604 vulnerability by Kinsing intrusion set.