mitcharoo

Introducing Unit 42’s Attribution Framework Peel back the layers on Unit 42's Attribution Framework. We offer a rare inside view into the system used to ultimately assign attribution to threat groups. Peel back the layers on Unit 42's Attributi...

unit42.paloaltonetworks.com/unit-42-attr...

China’s Covert Capabilities | Silk Spun From Hafnium China-linked hackers used patented spyware tech from front companies tied to Hafnium, exposing gaps in cyber threat attribution.

The Cyber Patents China Didn’t Want Us to Find…

@sentinellabs.bsky.social has uncovered 10+ patents for highly intrusive forensics and data collection tools—filed by companies named in U.S. government indictments for working with the Chinese Hafnium (aka Silk Typhoon) APT group.

ShinyHunters behind Salesforce data theft attacks at Qantas, Allianz Life, and LVMH A wave of data breaches impacting companies like Qantas, Allianz Life, LVMH, and Adidas has been linked to the ShinyHunters extortion group, which has been using voice phishing attacks to steal data f...

A really nice breakdown of the differences and overlap between Scattered Spider and ShinyHunters

Attribution is hard, especially when there is a lot of nuance.

Via @bleepingcomputer.com

Sounds French anyway

At least we know the risk and have significant traceability. Closed source is based entirely on trust.