Avis de sécurité

Menaces et incidents


Les rapports Menaces et Incidents détaillent l'état des connaissances et les investigations de l'ANSSI en analyse de la menace et traitements d'incidents

CERTFR-2021-CTI-009 : ? Identification of a new cybercriminal group : Lockean (03 novembre 2021)

Publié le 3 novembre 2021 09:50

  Based on incidents reported to the ANSSI and their commonalities, investigations were carried out by the Agency to confirm the existence of a single cyber criminal group responsible …

Lire la suite

CERTFR-2021-CTI-008 : Identification d’un nouveau groupe cybercriminel : Lockean (03 novembre 2021)

Publié le 3 novembre 2021 09:44

  Sur la base d'incidents signalés à l'ANSSI et de leurs points communs, des investigations ont été menées afin de confirmer l'existence d'un groupe …

Lire la suite

Identification d'un nouveau groupe cybercriminel : Lockean (03 novembre 2021)

Publié le 3 novembre 2021 01:00

Version anglaise : ????????   Sur la base d'incidents signalés à l'ANSSI et de leurs points communs, des investigations ont été menées afin de confirmer l'existence d'un groupe cybercriminel responsable de ceux-ci, de comprendre son mode opératoire et de distinguer ses principales techniques,...

Lire la suite

? Identification of a new cybercriminal group : Lockean (03 novembre 2021)

Publié le 3 novembre 2021 01:00

Version française : ????????   Based on incidents reported to the ANSSI and their commonalities, investigations were carried out by the Agency to confirm the existence of a single cyber criminal group responsible for these incidents, understand its modus operandi and distinguish its techniques,...

Lire la suite

CERTFR-2021-CTI-007 : ? The Egregor Ransomware (02 mars 2021)

Publié le 2 mars 2021 14:58

Active since September 2020, the Egregor ransomware is currently being used in Big Game Hunting operations. Part of the Sekhmet malware family, Egregor is sometimes considered the successor to …

Lire la suite

? The Egregor Ransomware (02 mars 2021)

Publié le 2 mars 2021 01:00

French version: ???????? Active since September 2020, the Egregor ransomware is currently being used in Big Game Hunting operations. Part of the Sekhmet malware family, Egregor is sometimes considered the successor to Maze. It is made available to various affiliates, explaining the different chains of...

Lire la suite

? The Ryuk Ransomware (26 février 2021)

Publié le 26 février 2021 15:00

French version: ???????? First observed in August 2018, the Ryuk ransomware has since been used in Big Game Hunting operations. It is characterized by the use of different infection chains and the extreme speed of the Bazar-Ryuk chain, as well as the absence of a dedicated leak site. A Ryuk variant...

Lire la suite

? The Ryuk Ransomware (26 février 2021)

Publié le 26 février 2021 15:00

French version: ????????   First observed in August 2018, the Ryuk ransomware has since been used in Big Game Hunting operations. It is characterized by the use of different infection chains and the extreme speed of the Bazar-Ryuk chain, as well as the absence of a dedicated leak site. A Ryuk...

Lire la suite

CERTFR-2021-CTI-005 : ? Sandworm intrusion set campaign targeting Centreon systems (15 février 2021)

Publié le 15 février 2021 14:59

  ANSSI has been informed of an intrusion campaign targeting the monitoring software Centreon distributed by the French company CENTREON which resulted in the breach of several French …

Lire la suite

LIENS ASSOCIES


Inscrivez-vous à la newsletter CSIRT pour recevoir périodiquement les publications

Contact

contact@csirt-universitaire.org
+221 78 601 64 64
BP: XXX - Sénégal