In June 2023, CRA Business Intelligence conducted a survey asking 210 security and IT leaders and executives, practitioners, administrators, and compliance professionals in North America about the effectiveness of their organizations' threat intelligence programs and tools. Some respondents were forthcoming about the challenges testing their organizations' capabilities . Below are their verbatim responses found in the report, titled Threat intelligence: Eyes on the enemy.
Cybercriminals are reportedly instructing victims to withdraw cash and deposit it into crypto kiosks, which then transfer the funds to attacker-controlled wallets.
Storm-2949 initiates attacks by targeting users with privileged roles, such as IT personnel or senior leadership, using social engineering tactics to obtain their Microsoft Entra ID credentials.