{"id":9955,"date":"2018-08-17T14:43:24","date_gmt":"2018-08-17T14:43:24","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/29236\/Necurs-Botnet-Launches-Fresh-Assault-Against-Banks.html"},"modified":"2018-08-17T14:43:24","modified_gmt":"2018-08-17T14:43:24","slug":"necurs-botnet-launches-fresh-assault-against-banks","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/","title":{"rendered":"Necurs Botnet Launches Fresh Assault Against Banks"},"content":{"rendered":"<div><img decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/r\/2018\/08\/17\/c8d3337f-cd2a-4f9c-bb1c-e3397e75faff\/thumbnail\/770x578\/88cabf3e13c5837a8008214e8dd06083\/screen-shot-2018-08-17-at-12-28-23.jpg\" class=\"ff-og-image-inserted\"\/><\/div>\n<p>The Necurs botnet has been linked to a new campaign launched against financial institutions in order to spread Remote Access Trojans (RATs).<\/p>\n<div class=\"relatedContent alignRight\">\n<h3 class=\"heading\"><span class=\"int\">More security news<\/span><\/h3>\n<\/div>\n<p><a href=\"https:\/\/cofense.com\/necurs-targeting-banks-pub-file-drops-flawedammyy\/\" target=\"_blank\" rel=\"noopener noreferrer\">According to Cofense<\/a>, the campaign started on August 15. Spam messages were sent en masse to 2,700 banks.<\/p>\n<p>However, what makes this campaign interesting is that all targets were bank employees, which suggests a level of spear phishing.<\/p>\n<p>&#8220;There were no free mail providers in this campaign, signaling clear intent by the attackers to infiltrate banks specifically,&#8221; Cofense says.<\/p>\n<p>The Necurs botnet, known internally by <a href=\"https:\/\/www.proofpoint.com\/us\/threat-insight\/post\/leaked-source-code-ammyy-admin-turned-flawedammyy-rat\" target=\"_blank\" rel=\"noopener noreferrer\">Proofpoint as TA505<\/a>, is one of the largest spam generators in existence.<\/p>\n<p>The short-lived campaign launched by the botnet abruptly stopped roughly eight hours after being discovered.<\/p>\n<p>The spam emails in this campaign are basic and appear to be coming from India. The message titles are simple, too, as they include either &#8220;Request BOI&#8221; or &#8220;Payment Advice&#8221; with a random number attached.<\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_ZD_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\">\n<\/section>\n<p>However, the malicious payload is far from simple.<\/p>\n<p><strong>CNET: <a href=\"https:\/\/www.cnet.com\/news\/commonwealth-bank-of-australia-financial-data-breach-20-million-accounts\/\" target=\"_blank\" rel=\"noopener noreferrer\">Australia&#8217;s biggest bank lost records for 20 million accounts<\/a><\/strong><\/p>\n<p>As a break outside the norm for the botnet, there is the addition of weaponized Microsoft Publisher files which are attached to the fraudulent emails. The .PUB files contain embedded macros which, once downloaded and opened, then grabs a payload from a remote host. A smaller number of targets were issued malicious .PDF file attachments.<\/p>\n<p><strong>See also: <a href=\"https:\/\/www.zdnet.com\/article\/hacky-hack-hack-teen-arrested-for-breaking-into-apples-network\/\">&#8216;Hacky hack hack&#8217;: Teen arrested for breaking into Apple&#8217;s network<\/a><\/strong><\/p>\n<p>&#8220;Like Word and Excel, Publisher has the ability to embed macros,&#8221; Cofense says. &#8220;So just when you are feeling confident about a layered defense protecting you from malicious Word docs, Necurs adapts and throws you a curveball.&#8221;<\/p>\n<p>The malware payload is the FlawedAmmyy RAT. FlawedAmmyy is based on the leaked source code of the legitimate Ammyy Admin remote desktop control software.<\/p>\n<p>The Trojan is able to seize control of an infected machine&#8217;s host, providing remote access to a threat actor, as well as stealing sensitive data. Researchers say the malware can also serve as a &#8220;beachhead for any further lateral movement within the organization.&#8221;<\/p>\n<p><strong>TechRepublic: <a href=\"https:\/\/www.techrepublic.com\/article\/uk-bank-it-nightmare-that-locked-out-1-9m-customers-is-exactly-what-shouldnt-happen\/\" target=\"_blank\" rel=\"noopener noreferrer\">UK bank IT nightmare that locked out 1.9M customers is exactly what shouldn&#8217;t happen<\/a><\/strong><\/p>\n<p>Necurs was first spotted in 2012 and hit the spotlight several years ago after threat actors harnessed the botnet to spread the Dridex banking Trojan and Locky ransomware. The researchers do not know who is behind the campaign, or why the attack was so short-lived.<\/p>\n<p>At the same time, researchers from Proofpoint say the botnet is also being used to distribute a new strain of malware. Dubbed Marap, the payload dropper is able to steal system information and receive additional modules for further infection from C&amp;C servers.<\/p>\n<p>The targets in the latest campaign ranged from small banks to some of the largest and most well-known financial institutions. While the assault has stopped, for now, there are no guarantees banks will not soon again be targeted.<\/p>\n<h3>Previous and related coverage<\/h3>\n<p>READ MORE <a href=\"https:\/\/packetstormsecurity.com\/news\/view\/29236\/Necurs-Botnet-Launches-Fresh-Assault-Against-Banks.html\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":9956,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[60],"tags":[2790],"class_list":["post-9955","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-packet-storm","tag-headlinemalwarebankcybercrimebotnetfraud"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Necurs Botnet Launches Fresh Assault Against Banks 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Necurs Botnet Launches Fresh Assault Against Banks 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2018-08-17T14:43:24+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/necurs-botnet-launches-fresh-assault-against-banks.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"578\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Necurs Botnet Launches Fresh Assault Against Banks\",\"datePublished\":\"2018-08-17T14:43:24+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/\"},\"wordCount\":497,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/necurs-botnet-launches-fresh-assault-against-banks.jpg\",\"keywords\":[\"headline,malware,bank,cybercrime,botnet,fraud\"],\"articleSection\":[\"Packet Storm\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/\",\"name\":\"Necurs Botnet Launches Fresh Assault Against Banks 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/necurs-botnet-launches-fresh-assault-against-banks.jpg\",\"datePublished\":\"2018-08-17T14:43:24+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/necurs-botnet-launches-fresh-assault-against-banks.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2018\\\/08\\\/necurs-botnet-launches-fresh-assault-against-banks.jpg\",\"width\":770,\"height\":578},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/necurs-botnet-launches-fresh-assault-against-banks\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"headline,malware,bank,cybercrime,botnet,fraud\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/tag\\\/headlinemalwarebankcybercrimebotnetfraud\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Necurs Botnet Launches Fresh Assault Against Banks\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Necurs Botnet Launches Fresh Assault Against Banks 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/","og_locale":"en_US","og_type":"article","og_title":"Necurs Botnet Launches Fresh Assault Against Banks 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2018-08-17T14:43:24+00:00","og_image":[{"width":770,"height":578,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/necurs-botnet-launches-fresh-assault-against-banks.jpg","type":"image\/jpeg"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Necurs Botnet Launches Fresh Assault Against Banks","datePublished":"2018-08-17T14:43:24+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/"},"wordCount":497,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/necurs-botnet-launches-fresh-assault-against-banks.jpg","keywords":["headline,malware,bank,cybercrime,botnet,fraud"],"articleSection":["Packet Storm"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/","url":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/","name":"Necurs Botnet Launches Fresh Assault Against Banks 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/necurs-botnet-launches-fresh-assault-against-banks.jpg","datePublished":"2018-08-17T14:43:24+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/necurs-botnet-launches-fresh-assault-against-banks.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2018\/08\/necurs-botnet-launches-fresh-assault-against-banks.jpg","width":770,"height":578},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/necurs-botnet-launches-fresh-assault-against-banks\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"headline,malware,bank,cybercrime,botnet,fraud","item":"https:\/\/www.threatshub.org\/blog\/tag\/headlinemalwarebankcybercrimebotnetfraud\/"},{"@type":"ListItem","position":3,"name":"Necurs Botnet Launches Fresh Assault Against Banks"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/9955","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=9955"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/9955\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/9956"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=9955"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=9955"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=9955"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}