Perception Point Blog Archive

Example of a Combined Attack and How it was Prevented

Learn how we intercepted an email thread that combined popular attack vectors: impersonation, encrypted archive, and a malicious macro.

Perception Point Incident Response
May-19

Statement of Account Email Attack

Learn about the widespread attack in which users first receive an email from an external source requesting an updated Statement of Account.

Perception Point Incident Response
May-19

Campaign Alert: Call Me ASAP

Learn how attackers take an email address and insert it into the account name so users believes the site is legitimate in a recent campaign.

Perception Point Incident Response
May-19

CVE-2019-0539 to Remote Code Execution (RCE)

This post reviews how to achieve a full R/W (Read/Write) primitive which can ultimately lead to a RCE (Remote Code Execution).

Rom Cyncynatus, Security Researcher
Mar-19

Incident Report: Composite Moniker (CVE-2017-8570) & OLE Object

Learn how we intercepted a RTF document that leverages CVE-2017-8570, the “Composite Moniker”, a document containing an "ole object".

Perception Point Incident Response
Feb-19

Incident Report: CV or Cyber Vector?

In this post we discuss how a cyber attack involving malicious macro code was disguised as a CV delivered via email.

Perception Point Incident Response
Feb-19

CVE-2019-0539 Root Cause Analysis

Learn how CVE-2019-0539 was fixed in the Microsoft Edge Chakra Engine update for January 2019 via a Root Cause Analysis (RCA) report.

Shlomi Levin
Feb-19

Incident Report: Fibonacci Backdoor & Malicious Email

Learn how the Fibonacci backdoor infection process grants an attacker control to remotely execute commands through malicious email.

Perception Point Incident Response
Jan-19

Incident Report: Fax Attack

Learn how a fax attack tricks employees into click on a phishing link by leveraging known cybersecurity service, EFax.

Perception Point Incident Response
Jan-19

Incident Report: AP28 – Fancy Bear

In this post we discuss how Perception Point protects against highly advanced threats like APT28 (Fancy Bear).

Perception Point Incident Response
Jan-19

CVE-2017-0199 (Still) In The Wild

Learn how Perception Point’s advanced threat detection platform caught an advanced attack (CVE-2017-0199) delivered via a malicious document.

Perception Point Incident Response
Dec-18

Incident Report: Trick or Treat

In this post we discuss a phishing technique that tricks users into thinking an image of the attached file can be opened in snapshot mode.

Perception Point Incident Response
Dec-18

Blog.