#38 - Intel Chat: Donut, Agrius, Kimsuky, Pikabot, QBot & the Gootloader Initial Access-as-a-Service Operation.

In this episode of The Cybersecurity Defenders Podcast, we discuss some cutting-edge intel coming out of LimaCharlie's community Slack channel.

• FortiGaurd Labs encounters a kernel driver that makes use of the open-source donut tool.
• Checkpoint researchers observe Iranian threat actor Agrius operating against Israeli targets.
• SentielOne notes changes in the ongoing campaign by Kimsuky.
• Microsoft uncovers stealthy malicious activity aimed at critical infrastructure in the United States.
• ZScaler Threatlabz reporting on Pikabot, a new malware trojan.
• Bleeping Computer reporting that the QBot malware operation has started to abuse a DLL hijacking flaw in the Windows 10 WordPad program.
• eSentire launches a multi-pronged offensive against a growing cyberthreat: the Gootloader Initial Access-as-a-Service Operation.

The Cybersecurity Defenders Podcast: a show about cybersecurity and the people that defend the internet.