Tracking An Effective Ransomware Campaign – Part 3

Posted on November 29th, 2021

The more things change, the more they stay the same. Ransomware attacks continue to disrupt organizations across all sectors while the results of law enforcement actions are waiting to be seen.  We continue to monitor an effective threat group that shows no signs of slowing down. The following domains were identified and attributed to this […]

Tracking An Effective Ransomware Campaign – Part 2

Posted on October 26th, 2021

Since our last post at the end of August 2021, we have continued to track an effective ransomware group and they have been busy!  We are tracking over 120 domains correlated to this threat group. They have been busy in October registering over 20 new domains in the last two weeks. The following new domains […]

Cobalt Strike and Ransomware – Tracking An Effective Ransomware Campaign

Posted on August 31st, 2021

During the course of multiple incident response engagements, we encountered a persistent, unknown ransomware threat group utilizing an obfuscated Golang encryptor [1].  It is believed that the threat actors gained initial access through one or more SonicWall exploits [2], [3].  We can confirm prior sightings that Cobalt Strike was used by these threat actors to […]

Augmenting a Django QuerySet

Posted on December 17th, 2019

The Django 2.1 ORM is quite capable. Though it does not cover every conceivable use case, it handles nearly all simple queries and many more complex queries as well. Still, there are times when I wish the ORM had some capability that it doesn’t. That’s happened a couple times this year as I’ve been learning […]

BreakPoint Labs Awarded SBIR Direct to Phase II Contract

Posted on November 4th, 2019

Falls Church, VA – BreakPoint Labs, a National Capital Region-based cybersecurity services firm, is pleased to announce the award of a Small Business Innovation Research (SBIR) contract for the Department of Defense (DoD) in the field of cybersecurity analysis for critical infrastructure resilience. The DoD’s Office of the Secretary of Defense (OSD), in conjunction with […]

BreakPoint Labs Achieves CMMI® Maturity Level 3 for Services

Posted on October 11th, 2019

Falls Church, VA – BreakPoint Labs, a National Capital Region-based cybersecurity services firm, is proud to announce it has successfully been appraised at maturity level 3 of the Capability Maturity Model Integration (CMMI)® for Services (CMMI-SVC). CMMI® defines a world-class performance improvement model for organizations aiming to deliver high-performance operations. CMMI® is comprised of a […]