@quoscient

Built by operators for operators, QuoScient supports customers across all industries against digital threats of all kinds.

 Frankfurt on the Main, Germany
quoscient.io
Joined August 2018
  • Tweets762
  • Following2.5K
  • Followers601
218Media
Nearly four years after we founded #QuoScient, it is now time to write a new chapter in our history. A chapter that builds on our previous success and empowers for future growth. Please read our press statement here: quoscient.io/archives/news/q… #infosec #security #cybersecurity
3
2
7
The second blog of the #TIBER series is out! We cover the TIBER-EU framework, test structure, as well as the role of the #threatintelligence provider. Enjoy your reading: bit.ly/33vCRMM
2
1
6
QuoScient retweeted
QuoLab@QuoLabTech3 Sep 2020
#TBT to CEO Dan Young's (@zDanYoung) chat with the @CyberScoopNews Securiosity podcast team about how information is being shared during this unique time. Listen here: cyberscoop.com/radio/quolab-… #infosec #cybersecurity
3
1
QuoScient retweeted
QuoSec@QuoSecGmbH4 Sep 2020
New blog post: using grap to get up-to-speed on a documented malware family (QakBot) blog.quosec.net/posts/grap_q…
2
1
5
Our weekly analysis highlights a new Qakbot #malware campaign using Emotet’s infection process, a #ransomware loader tool called xoLoader detected by QuoINT, and more geopolitical & cyber threats! Details here: bit.ly/3i2HWlS #ThreatIntel #CyberSecurity #CyberNews
1
4
#QuoINT Weekly Snapshot: our investigation into a #datadump for exploited #PulseSecure #VPN's posted online; new #FIN6 job-themed #spearphishing activity; analysis of Big Game Hunting with #WastedLocker #Ransomware; and latest #Lazarus and #APT34 activity. quointelligence.eu/2020/08/w…
2
4
#QuoINT discovered a new, active campaign attributed to #BlackWater malware. The attack is likely mistakenly spoofing the #OSCE with a maldoc themed on the recent explosion in #Beirut. Malware & C2 infra is live, TTPs align w/ previous #BlackWater reports. quointelligence.eu/2020/08/b…

BlackWater Malware Leveraging Beruit Tragedy in New Targeted Campaign

On 5 August, QuoINT discovered a RAR archive uploaded to VirusTotal from Azerbaijan, containing a malicious, macro-enabled Word Document (maldoc) themed for the recent explosion in Beirut.

quointelligence.eu
1
6
9
Why is #Geopolitics so important to include in #ThreatIntelligence reports? bit.ly/2PxGtXY #infosec #cybersecurity #threatIntel #cyberthreatIntelligence
6
2
Following the new #BlackWater #Malware campaign using the #Beirut tragedy to lure the targets? You can find the latest #ThreatIntelligence in our updated blog: quointelligence.eu/2020/08/b… #ReconHellcat #AdvancedPersistentThreat #DNSsecurity #OSCE #cyberattack

BlackWater Malware Leveraging Beruit Tragedy in New Targeted Campaign

On 5 August, QuoINT discovered a RAR archive uploaded to VirusTotal from Azerbaijan, containing a malicious, macro-enabled Word Document (maldoc) themed for the recent explosion in Beirut.

quointelligence.eu
1
19
1
24
Our weekly analysis of the top #cyber incidents and vulnerabilities is out! Including @Intel's 20GB #databreach, @Microsoft vulnerabilities actively exploited in the wild, #BlackWater #malware by ReconHellcat leveraging the #Beirut tragedy, and more: bit.ly/31OlYMn
5
2
Learn how the @ecb #TIBER-EU framework can strongly benefit financial institutions and reduce #cyberrisk. bit.ly/2DxiGVJ #threatintelligence #redteam #compliance
1
1
3
Our Weekly highlights the new #Russian-speaking #cyberespionage APT group #Redcurl, the impact of normalized relations between Israel & UAE, as well as other major #Cyber & #Geopolitical events. Read the summary now: bit.ly/3aJGXnF
2
2
QuoScient retweeted
QuoSec@QuoSecGmbH24 Jun 2020
Replying to @QuoSecGmbH @UniFAU
We uploaded the slides on our blog: blog.quosec.net/posts/lectur…
1
4
QuoScient retweeted
QuoSec@QuoSecGmbH19 Jun 2020
We did this week a (remote) lecture for @UniFAU students on Forensics as a part of defensive security. Here is an example of timestamp forensics.
1
2
1
3
QuoScient retweeted
QuoLab@QuoLabTech27 Jul 2020
Earlier this month, the Research Data Alliance (@resdatall) released #datasharing guidelines for public health emergencies, citing #COVID19 and the imperative nature of streamlining #collaboration. Read more: healthcareitnews.com/news/re… @HealthITNews
1
1
We are happy to introduce you to our five part blog series explaining the benefits of #geopolitics as an essential part of #Cyber #ThreatIntelligence. Today, we start with our first blog post ‘Our Holistic Approach to Cyber Threat Intelligence’: quointelligence.eu/2020/06/o…

The Importance of Geopolitics for Cyber Threat Intelligence

This post is the first in a series of five short blogposts, in which we will explain why geopolitics is an integral part of our cyber threat intelligence analyses. Each blogpost will outline an...

quointelligence.eu
4
1
7
Check our Intelligence Snapshot to read about unknown threat actors abusing #Adobe Campaign open redirect, cyber #espionage campaign using InvisiMole backdoors to target orgs in Eastern Europe, and how #BlueLeaks fit into the current unrest in #US quointelligence.eu/2020/06/w…
2
1
3
Great research from @ESETresearch shedding light on one of #GoldenChickens customers using #Evilnum malware. The GC MaaS is still very active, and growing in usage among threat actors. Since 2020 we reported multiple attacks using updated toolkits, #staytuned
ESET Research
@ESETresearch9 Jul 2020
#ESETresearch dissects #Evilnum #APT group operations as its malware targets #fintech companies. Its arsenal consists of homemade malware, and tools purchased from the #GoldenChickens MaaS provider, whose other customers include #FIN6 and #CobaltGroup welivesecurity.com/2020/07/0… 1/6

More evil: A deep look at Evilnum and its toolset

ESET research gives a detailed picture of the operations of the Evilnum group and its toolkit deployed in attacks against carefully chosen targets in the fintech sector

welivesecurity.com
2
6
Curious about the @ecb #TIBER-EU framework or unsure of its benefits and if it applies to your org? In this blog series we explain TIBER benefits for #banks & how #QuoINT supports such efforts. #threatintelligence #redteam #compliance #cyberrisk quointelligence.eu/2020/07/w…

What is TIBER-EU and how can Financial Institutions benefit from it?

This post is the first part of a two-part blog series in which we will explain the Threat Intelligence-based Ethical Red-teaming (TIBER-EU) framework and how financial institutions can benefit from...

quointelligence.eu
2
3
Read about the newest #malspam campaign distributing #Valak in our Weekly Intelligence Snapshot. It also covers a new critical, actively exploited #RCE in F5 BIG-IP devices, Citrix patching #vulnerabilities, & #Lazarus targeting online shoppers quointelligence.eu/2020/07/w…
2
1
Our Weekly Snapshot is patch heavy! @Microsoft (w/ 1 RCE in #WindowsDNS), @Zoom, @SAP release necessary updates. We also report on #Evilnum using #GoldenChickens #Maas tools in a new campaign. For geo, we cover the new Iran-China econ& security partnership quointelligence.eu/2020/07/w…
3
4
Load more