The SOC ITrust teams remain particularly vigilant regarding the affected areas:
In light of recent developments regarding the resurgence of attacks orchestrated by APT31, the ITrust teams have already compiled a list of indicators of compromise. This list has been added to the MISP knowledge base and the Graylog lookup table.
ITrust teams can provide nighttime on-call support for clients who do not have 24/7 monitoring.
For more information:
> Our teams are sized to operate at full capacity 24/7.
What are the risks to your business?
A large-scale and particularly aggressive compromise campaign is currently underway in France. It is targeting numerous French entities and is being carried out using the APT31 modus operandi.
Investigations show that this modus operandi involves compromising routers to use them as anonymization relays prior to conducting reconnaissance and attacks. As a result, markers—derived from routers compromised by the attacker—are provided to enable the identification of compromises (since the beginning of 2021) and their detection.
Any detection based on these elements does not necessarily constitute evidence of a breach and must be analyzed to resolve any doubts.
