CyberWire Daily Targets from DuckTail. [Research Saturday]
Oct 7, 2023
Zscaler conducted research on the DuckTail threat actors who primarily target users in digital marketing and advertising. The podcast explores how DuckTail uses malware and social engineering techniques to target digital marketers and engage in financial scams. It also discusses methods used by attackers to deceive victims, install malware, steal victim information, and communicate with threat actors. The podcast highlights the goal of cybercriminals targeting business Facebook accounts for financial scams and the importance of TLS inspection to prevent data leakage and credential exfiltration. Additionally, an interview with Deepin Desai discusses research on Lucur 3's cloud tactics and their responsibility for breaching large enterprises.
Chapters
Transcript
Episode notes
1 2 3 4 5
Introduction
00:00 • 2min
Duck Tale: Targeting Digital Marketers
01:41 • 4min
Deception, Malware Installation, and Victim Notification
05:24 • 3min
Financial Scams and Stolen Credentials on Social Media
08:25 • 4min
Research on the cloud TTPs of Lucur 3 and its overlaps with scattered spider
12:50 • 2min