Talos Takes

Talos’ spin on security news

Every week, host Jon Munshaw brings on a new guest from Talos or the broader Cisco Secure world to break down a complicated security topic in just five or 10 minutes. We cover everything from breaking news to attacker trends and emerging threats.

Subscribe
  • Talos Takes
    2022-08-12

    Talos Takes Ep. #70 (NCSAM edition): For once, a positive spin on hybrid work

    Everyone loves to talk and write about how tough it is that we are all working remotely during the COVID-19 pandemic. So for once — to celebrate National Cybersecurity Awareness Month — Talos Takes wants to talk about the positives! Christopher Marshall, the head of Talos’ detection research team, joins the show to discuss how he’s kept his team’s morale up during this time. Cybersecurity is a rough industry to be in, regardless of any external factors. So it’s important for him to avoid employee burnout and turnover. He and Jon also discuss the positives of working remotely, what they’re most looking forward to when they can go back into the office and their favorite pandemic-era hobbies.

    Download
    Run Time: 00:09:22

    Keywords
    • work from home
    • COVID
    • burnout
    • hiring
    • security

  • Talos Takes
    2022-08-12

    Talos Takes Ep. #67: Why are ransomware groups getting so emotional?

    Fresh off of translating an entire ransomware playbook from Russian to English, Azim and Dave from the Talos Threat Intelligence & Interdiction team join Talos Takes to talk about this project. They provide some first-hand insights into what this leaked playbook tells us about the Conti ransomware-as-a-service group. Threat actors — they have feelings just like us!

    Download
    Run Time: 00:08:20

    Keywords
    • Conti
    • ransomware
    • APTs

  • Talos Takes
    2022-08-12

    Talos Takes Ep. #68: It's a bird, it's a plane, it's some rats!

    Allow Vitor Ventura to take you on a journey of discovery, threat actors and attribution. He recently assisted with an investigation into a series of malware and spam campaigns using aviation-themed lures. These include fake flight itineraries, invoices and more. Vitor joins us on this week’s Talos Takes episode to discuss what he learned during this process, including how he connected the campaigns, what he learned (and couldn’t learn) about the actor behind them, and what he’ll take away into his next research. This is a great episode for anyone who is wondering about what kinds of pitfalls are out there for a security researcher.

    Download
    Run Time: 00:06:17

    Keywords
    • malware
    • spam
    • email

  • Talos Takes
    2022-08-12

    Talos Takes Ep. #66: Dude, where's my bandwidth?

    “Proxyware” sounds like a complicated topic that you’re too afraid to ask about. But really, it’s just software that allows users to sell off a portion of their internet bandwidth for a small profit. Problem is, attackers are swooping in on this popular software to spread malware and steal users’ money. Edmund Brumaghin joins the show this week to discuss his recent research into proxyware applications and how malware is hiding in plain sight. Edmund discusses why these types of apps are potentially unwanted applications, and what the threat is for enterprise users with remote workers, as well as personal PC users.

    Download
    Run Time: 00:07:09

    Keywords
    • proxyware
    • malware
    • spam
    • scams

  • Talos Takes
    2022-08-12

    Talos Takes Ep. #65: We're all excited to travel again, but so are attackers

    As more people around the world start to get vaccinated against COVID-19, travel is becoming easier, especially during these summer months. But as much as you may be excited to travel, so are threat actors. Asheer Malhotra was part of a team that looked into a series of campaigns targeting users in Latin America, specifically using social engineering tactics centered around travel. Some of the lure documents, in this case, include fake travel itineraries, coupons for flights and hotel reservation confirmations. Asheer joins the show this week to discuss the throughline between all these attacks and their potential connections to the Aggah crimeware group.

    Download
    Run Time: 00:07:50

    Keywords
    • Aggah
    • malspam
    • social engineering
    • COVID-19
    • spam
    • RATs

  • Talos Takes
    2022-08-12

    Talos Takes Ep. #64: We go back to school

    Students are starting to go back to school across the U.S. There are plenty of things to worry about with the “new normal” while the world still combats COVID-19, and while we can’t help students, teachers and admins with everything, we can at least provide a little security advice. Nick Biasini joins the show once again to discuss the best cybersecurity practices as schools spin back up. What should parents tell their kids about electronic devices they bring home? What will IT admins have learned over the past year and a half plus? And how should we deal with the new norm of hybrid learning?

    Download
    Run Time: 00:08:35

    Keywords
    • school
    • remote learning
    • cheating
    • education
    • COVID-19
    • hybrid

  • Talos Takes
    2022-08-12

    Talos Takes Ep. #63: Shield your eyes from the Solarmarker

    Andrew Windsor from our malware research team joins the show for the first time to talk about Solarmarker. This is a campaign Andrew’s followed for a while that recently added new modules that make it particularly dangerous. The attackers behind Solarmarker could basically use this threat to drop whatever they want. At least for now, they’re sticking to information-stealing. But could it ever get worse than that?

    Download
    Run Time: 00:10:23

    Keywords
    • malware
    • Solarmarker
    • dropper
    • Uranus
    • Mars

  • Talos Takes
    2022-08-12

    Talos Takes Ep. #62: There's still plenty of mileage left in BEC

    Business email compromise may seem like last decade’s threat, but it’s still just as prevalent as ever. A recent FBI report found that it cost users more than $1 billion in 2020, and attackers are now capitalizing on everything from PlayStation 5 sales to the COVID-19 pandemic to still scam people. On this week’s Talos Takes, Nick Biasini recaps his recent research into BEC and discusses why there are some reasons why this threat may never go away (hint: users).

    Download
    Run Time: 00:05:25

    Keywords
    • business email compromise
    • spam
    • phishing
    • email

  • Talos Takes
    2022-08-12

    Talos Takes Ep. #61: Why does SideCopy seem so familiar?

    The last time Jon had Asheer Malhotra from Talos Outreach on the show, they covered the Transparent Tribe APT. Asheer joins the show again this week to talk about another threat actor that is very similar to Transparent Tribe, but is just a tad different. Asheer recently co-authored a research paper on the aptly named SideCopy actor, which borrows many TTPs from their fellow actors, including Transparent Tribe. This episode, we’ll talk about SideCopy’s methods, why they may be borrowing so much from those around them and where they could go from here.

    Download
    Run Time: 00:08:28

    Keywords
    • APTs
    • SideCopy
    • RATs
    • trojans
    • spam
    • phishing

  • Talos Takes
    2022-08-12

    Talos Takes Ep. #60 (XL Edition): Kaseya emergency show

    In this special “XL edition” of Talos Takes, we’re bringing you the audio version of our live stream this week discussing the Kaseya supply chain attack. Nick Biasini from Talos Outreach went live with Hazel Burton, a Cisco product marketing manager, to discuss what transpired over the long Fourth of July weekend. 
    Nick discussed the Kaseya exploit leveraged in this campaign, plus the follow-on ransomware attacks. This is the best place to get the tl;dr on what happened, what you need to be doing now, and what Cisco Secure solutions can keep you protected.

    Download
    Run Time: 00:21:40

    Keywords
    • Kaseya
    • supply chain
    • ransomware
    • REvil