Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Organisations are discovering that trust decisions now must happen before certainty arrives. Ajay Biyani, Senior Vice President, APJ, Securonix Most executives assume the most important fraud decisions happen after an incident. Inside a modern bank, many of the most important decisions happen much earlier.

Fear, authority, and isolation are turning social engineering into one of the country’s most effective and revealing cybercrime models.

Veil#Drop is a sophisticated multi-stage malware delivery framework that combines social engineering, compromised websites, malicious JavaScript launchers, PowerShell download cradles, and trusted cloud-hosted infrastructure to deploy PureLog Stealer entirely in memory. The infection chain begins with a deceptively named JavaScript file masquerading as a document (e.g., transcript.pdf.js), which executes through Windows Script Host and launches PowerShell with execution policy bypasses enabled.

Chris Jacob, Field CISO, Securonix There is a particular kind of unease that comes with geopolitical tension. It rarely arrives for security teams as one clean, obvious event. More often, it shows up as a change in tempo across the environment. Scanning increases and phishing attempts feel sharper. Then you start having leadership asking harder questions about exposure, suppliers, regions, and sensitive data.

The Securonix Threat Research team has identified an ongoing espionage campaign, tracked as SHEETCREEP, where threat actors deliver a C# remote access trojan through a diplomatic-themed ISO phishing lure.