Drawing on insights from 582 full-spectrum DFIR investigations, Mjolnir Security reveals the uncharted forensic landscape of Windows 11. This intelligence briefing moves beyond legacy artifacts to expose the critical evidence sources modern adversaries leverage, including the Windows Subsystem for Android (WSA), covert channels in Microsoft Teams, and the persistent ledger [...]
Welcome to Skuggaheimar — the shadow worlds where threat actors dwell, and malware spreads like mythic poison through unseen paths. In this series, Mjolnir Security unearths the cultural patterns, motivations, and behaviors behind modern cyber adversaries. Through the lens of digital anthropology, we map the stories, tactics, and symbolic codes ...
The ongoing trade tensions between the United States and Canada, fueled by tariffs imposed by both the Trump administration and retaliatory measures from Prime Minister Trudeau, are poised to have far-reaching effects on numerous industries—including cybersecurity. Canadian cybersecurity firms offering Incident Response (IR), Digital Forensics, and SOC-as-a-Service are particularly vulnerable ...
Background and History BlackSuit ransomware, a rebranded version of the infamous Royal ransomware, emerged in May 2023. This strategic rebranding was an attempt to evade intensified law enforcement scrutiny. Originating from the notorious Conti ransomware gang, BlackSuit quickly targeted high-profile sectors such as healthcare, education, and critical infrastructure, causing widespread ...
INC Ransomware is a sophisticated cybercriminal group targeting organizations through complex cyberattacks. Here’s an explanation of their typical attack sequence and tactics designed for a non-technical audience in a business context: The sequence described utilizes various tactics, techniques, and procedures (TTPs) identified in the MITRE ATT&CK framework, which is a ...
In the realm of cyber threats, two names have emerged in recent times that have been causing a stir in the cybersecurity community: Amadey and PrivateLoader. Both are associated with a sophisticated malware called “Sock5Systemz”. In this post, we delve deep into the mechanics of these malwares, their Tactics, Techniques, ...
Introduction: In today’s digital landscape characterized by an unprecedented degree of interconnectivity, global society is more susceptible to cyber threats than ever before. The escalating sophistication and frequency of cyber attacks necessitate a stronger emphasis on cybersecurity measures across organizations. Mjolnir Security emerges as a stalwart safeguard in this landscape, ...
In today’s digital era, cyber threats have become more potent and pervasive, impacting individuals and businesses across the globe. Two such prevalent threats are Qakbot and Cobalt Strike, both of which have wreaked havoc in the Canadian business landscape. In this blog post, we delve into what these threats are, ...
Introduction For years, Mjolnir Security’s team of Intelligence analysts has diligently monitored malware and cyber threats impacting Canadian businesses and infrastructure. Recently, we’ve noticed a shift in the malware landscape, with Emotet and Trickbot taking a step back as Qakbot emerges as a dominant threat. In this blog post, we ...
Mjolnir Security offers Threat Hunting as a Service (THaaS) to clients who face a shortage of skilled personnel or lack the required expertise to effectively monitor and protect their digital assets. THaaS is an advanced cybersecurity service that proactively identifies and neutralizes threats before they can cause significant harm to ...
Drawing on insights from 582 full-spectrum DFIR investigations, Mjolnir Security reveals the uncharted forensic landscape of Windows 11. This intelligence briefing moves beyond legacy artifacts to expose the critical evidence sources modern adversaries leverage, including the Windows Subsystem for Android (WSA), covert channels in Microsoft Teams, and the persistent ledger [...]
