#38 - Intel Chat: Donut, Agrius, Kimsuky, Pikabot, QBot & the Gootloader Initial Access-as-a-Service Operation.

FortiGaurd Labs encounters a kernel driver that makes use of the open-source donut tool.

Checkpoint researchers observe Iranian threat actor Agrius operating against Israeli targets.

SentielOne notes changes in the ongoing campaign by Kimsuky.

Microsoft uncovers stealthy malicious activity aimed at critical infrastructure in the United States.

ZScaler Threatlabz reporting on Pikabot, a new malware trojan.

Bleeping Computer reporting that the QBot malware operation has started to abuse a DLL hijacking flaw in the Windows 10 WordPad program.

eSentire launches a multi-pronged offensive against a growing cyberthreat: the Gootloader Initial Access-as-a-Service Operation.