{"id":33616,"date":"2022-10-06T08:35:02","date_gmt":"2022-10-06T12:35:02","guid":{"rendered":"https:\/\/intelligencecommunitynews.com\/?p=33616"},"modified":"2022-10-06T08:35:02","modified_gmt":"2022-10-06T12:35:02","slug":"nsa-cisa-fbi-issue-alert-on-custom-exfiltration-tools-being-used-against-dib","status":"publish","type":"post","link":"https:\/\/intelligencecommunitynews.com\/nsa-cisa-fbi-issue-alert-on-custom-exfiltration-tools-being-used-against-dib\/","title":{"rendered":"NSA, CISA, FBI issue alert on custom exfiltration tools being used against DIB"},"content":{"rendered":"

On October 4, the National Security Agency (NSA), the Cybersecurity and Infrastructure Security Agency (CISA), and the FBI\u00a0released a Cybersecurity Advisory<\/a>\u00a0that details the tactics, techniques and procedures (TTPs) that likely multiple advanced persistent threat (APT) groups recently used to steal sensitive information from a Defense Industrial Base organization. The advisory,\u00a0“Impacket, Custom Exfiltration Tools Used to Steal Sensitive Information from Defense Industrial Base Organization,”<\/a>\u00a0provides indicators of compromise and TTPs used by the groups and shares guidance to detect and prevent related activity.<\/p>\n

During a hunt on the organization’s network, CISA and a third-party incident response organization discovered the following malicious activity:<\/p>\n