TDR Team

Threat Detection & Research Team

Articles by
TDR Team

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
Microbes under a microscope.
Threat Research & Intelligence
TDR Team
June 1, 2022

MSDT abused to achieve RCE on Microsoft Office

Discover through our article, how attackers hijack the Microsoft Support Diagnostic Tool to remotely execute arbitrary code under Windows.

By
Félix AIME
By
TDR Team
& more
View more
Aerial view of the Estonian Military Academy and Baltic Defence College in Tartu, Estonia
Detection Engineering
TDR Team
APT
Phishing
May 23, 2022

TURLA’s new phishing-based reconnaissance campaign in Eastern Europe

Sekoia's Threat & Detection Researchers expose a reconnaissance and espionage campaign from TURLA against eastern-EU institutions.

By
Guillaume COUCHARD
By
Maxime ARQUILLIERE
By
TDR Team
& more
View more
Threat Research & Intelligence
TDR Team
Cybercrime
May 17, 2022

EternityTeam: a new prominent threat group on underground forums

During our monitoring of Dark Web cybercrime forums, we came across EternityTeam: here is what we found on this new active & organized threat

By
Quentin Bourgue
By
TDR Team
& more
View more
Concise (Best for web accessibility) High-altitude view of the reddish, cratered surface of Mars curving against a dark starry space background. Detailed (Best for context-rich descriptions) Wide-angle 3D rendering showing the horizon and surface of Mars from orbit. The reddish-orange, dusty terrain is covered with rugged impact craters, ridges, and valleys, contrasting with the pitch-black void of outer space filled with distant stars. Short/Decorative (Best for quick labeling) Curving cratered surface of Mars against a starry space background.
Threat Research & Intelligence
TDR Team
Cybercrime
April 7, 2022

Mars, a red-hot information stealer

Mars Stealer is an information stealer sold on underground forums by MarsTeam since June 22, 2021, with the malware-as-a-service model.

By
Pierre LE BOURHIS
By
Quentin Bourgue
By
TDR Team
& more
View more
A blue globe overlapping with orange locks and numbers.
Threat Research & Intelligence
TDR Team
March 23, 2022

Lapsus$: when kiddies play in the big league

The extorsion group Lapsus$ that already succeeded in breaching several high profile companies is running riot and sowing confusion. In this blog, our Threat & Detection Research team answers your questions by drawing the profile of the group.

By
Livia TIBIRNA
By
Narimane LAVAY
By
TDR Team
& more
View more
A keyboard with a glowing red key.
Threat Research & Intelligence
TDR Team
March 7, 2022

A war on multiple fronts – the turbulent cybercrime landscape

In this blog post, we will focus on developments in the world of cybercrime (which supposedly do not involve nation-state threat actors) in the current war context.

By
Livia TIBIRNA
By
TDR Team
& more
View more
Photograph of a computer monitor displaying CSS code in a code editor alongside a German-language webpage, viewed in a dark room.
Threat Research & Intelligence
TDR Team
Cybercrime
Ransomware
February 25, 2022

The story of a ransomware builder: from Thanos to Spook and beyond (Part 2)

Ransomware spook : In this second part of the series, you will discover how to handle such evil sightings and neutralize them before impact.

By
Kilian SEZNEC
By
Livia TIBIRNA
By
TDR Team
& more
View more
Ukrainian flag in the sunset, with a forest background.
Threat Research & Intelligence
TDR Team
February 24, 2022

Invasion of Ukraine – what implications in cyberspace?

Our analysts and researchers use this very specific context to provide an overview of the current state of cybercrime.

By
Livia TIBIRNA
By
TDR Team
& more
View more
Threat Research & Intelligence
TDR Team
APT
January 6, 2022

NOBELIUM’s EnvyScout infection chain goes in the registry, targeting embassies

NOBELIUM is another name for the APT29 intrusion set, operated by a threat actor allegedly linked to the SVR.

By
Félix AIME
By
TDR Team
& more
View more
Screen showing computer code.
Threat Research & Intelligence
TDR Team
December 13, 2021

Log4Shell: The defender’s worst nightmare?

In this blog post, our Threat Detection & Research team answers your questions on Log4Shell.

By
Félix AIME
By
TDR Team
& more
View more
A screenshot of the Conti News page.
Detection Engineering
TDR Team
Cybercrime
Ransomware
August 19, 2021

An insider insight into Conti operations – Part Two

This is the second part of our blog post about Conti, here we'll see how to detect Conti Operations techniques and much more.

By
Quentin Bourgue
By
Erwan CHEVALIER
By
Guillaume COUCHARD
By
TDR Team
& more
View more
A preview of the conti news site.
Detection Engineering
TDR Team
Cybercrime
Ransomware
August 17, 2021

An insider insight into Conti operations - Part One

In part 1, we focus on the Conti ransomware group whose training material was recently leaked on a cybercrime forum.

By
Guillaume COUCHARD
By
Livia TIBIRNA
By
Erwan CHEVALIER
By
Narimane LAVAY
By
TDR Team
& more
View more