3+ day, 15+ hour ago   (115+ words) SOC Prime Bias: Critical Rationale: This section details the precise execution of the adversary technique (TTP) designed to trigger the detection rule. The commands and narrative MUST directly reflect the TTPs identified and aim to generate the exact telemetry expected…...

2+ week, 4+ day ago   (268+ words) SOC Prime Bias: High UAT-10147 is a Chinese-speaking cybercrime group using agentic AI to automate and scale post-compromise operations. The actor targets Windows and Linux web servers for SEO fraud and data theft. Its AI-driven tooling supports exploit refinement, reconnaissance,…...

2+ week, 4+ day ago   (323+ words) SOC Prime Bias: High A Business Email Compromise (BEC) campaign is using a sophisticated JScript dropper to distribute Agent Tesla v4 malware. The attack relies on Unicode emoji obfuscation to evade signature-based detection and uses DonutLoader to execute a reflective payload…...

3+ week, 1+ day ago   (169+ words) SOC Prime Bias: High Users should treat unexpected requests to execute terminal commands, bypass Gatekeeper, or install manual updates from document sidebars as suspicious. Organizations should monitor for unusual Google Apps Script activity and unauthorized use of code-signing certificates. Strong…...

3+ week, 3+ day ago   (166+ words) SOC Prime Bias: High Users should avoid copying and executing unverified commands in Terminal, even when instructions appear on legitimate or trusted domains. Security teams should monitor for suspicious curl activity and Base64-encoded content within shell processes. Tools such as…...