AttackIQ released two assessments emulating The Gentlemen ransomware’s reported TTPs, including persistence, Defender evasion, Active Directory discovery, SMB lateral movement and file encryption, to help customers test security controls.
AttackIQ released an emulation based on internal analysis of NightSpire samples, covering host discovery and file encryption to help organizations test security controls. The article also describes the group’s reported tactics and ransomware behavior.
AttackIQ added a RoningLoader emulation to its AEV platform, modeling DragonBreath (APT-Q-27) post-compromise behaviors across execution, persistence, privilege escalation, defense evasion and discovery to help organizations test security controls.
AttackIQ released an Adversarial Exposure Validation attack graph emulating Sinobi ransomware behaviors, including discovery, privilege escalation and AES-128/Curve25519 file encryption, to test security controls and response workflows.
AttackIQ released an AEV attack graph emulating LokiLocker behaviors, including persistence, defense evasion, shadow-copy deletion, discovery and file encryption, to help teams test security controls. It draws on BlackBerry reporting and internal analysis.
AttackIQ released an emulation of reported BlackByte behaviors for testing security controls, including scheduled-task execution, security-tool tampering, ARP discovery, shadow-copy deletion, and AES/RSA file encryption.
