BlogTrace : Curated intelligence from security blog posts.

Microsoft breach by Midnight Blizzard (APT29): What happened, and what now?

Blog Source: MITIGA

IOC Available: no

YARA Rules: no

Timestamp: 2024.03.07
Midnight Blizzard conducts targeted social engineering over Microsoft Teams

Blog Source: Microsoft

IOC Available: yes

YARA Rules: no

Timestamp: 2023.08.02
NOBELIUM Uses Poland's Ambassador’s Visit to the U.S. to Target EU Governments Assisting Ukraine

Blog Source: Blackberry

IOC Available: yes

YARA Rules: no

Timestamp: 2023.03.14
Solving one of NOBELIUM’s most novel attacks: Cyberattack Series

Blog Source: Microsoft

IOC Available: no

YARA Rules: no

Timestamp: 2023.02.08
MagicWeb: NOBELIUM’s post-compromise trick to authenticate as anyone

Blog Source: Microsoft

IOC Available: no

YARA Rules: no

Timestamp: 2022.08.24
Russian APT29 Hackers Use Online Storage Services, DropBox and Google Drive

Blog Source: Unit42

IOC Available: yes

YARA Rules: no

Timestamp: 2022.07.19
NOBELIUM’s EnvyScout infection chain goes in the registry, targeting embassies

Blog Source: Sekoia

IOC Available: yes

YARA Rules: yes

Timestamp: 2022.01.06