The difference between Scarlet Goldfinch & SocGholish | Red Canary Threat Intelligence
Scarlet Goldfinch uses the allure of a browser update to entice users into downloading a malicious file that sets off a chain of events, ultimately leading to the adversary gaining control of their endpoints.
Senior Manager of Intelligence Alex Berninger takes a look at the threat, what it is, why it matters, and what defenders can do about it.
Scarlet Goldfinch 0:00
What is it? 0:12
How does it work? 0:37
Why does it matter? 1:56
How is it different from SocGholish? 2:31
What can defenders do about it? 3:09
Follow Alex:
/ a-berninger
Follow us:
/ redcanary
/ redcanary
---
Red Canary stops cyber threats no one else does, so organizations can fearlessly pursue their missions. We do it by delivering managed detection and response (MDR) across enterprise endpoints, cloud workloads, network, identities, and SaaS apps. As a security ally, we define MDR in our own terms with unlimited 24×7 support, deep threat expertise, hands-on remediation, and by doing what’s right for customers and partners.
Subscribe to our YouTube channel for frequently updated, how-to content about Atomic Red Team, threat hunting in security operations, MDR or Managed Detection and Response, and using the MITRE ATT&CK® framework.
#malware #remoteaccess #javascript