Publications | Daniel Kapellmann

top of page

Publications.

Screenshot 2024-03-30 1.25.23 PM.png

Life After Death? IO Campaigns Linked to Notorious Russian Businessman Prigozhin Persist After His Political Downfall and Death

Screenshot 2023-12-02 8.27.11 AM.png

Sandworm Disrupts Power in Ukraine Using a Novel Attack Against Operational Technology

Pro-PRC HaiEnergy Campaign Exploits U.S. News Outlets via Newswire Services to Target U.S. Audiences; Evidence of Commissioned Protests in Washington, D.C.

COSMICENERGY: New OT Malware Possibly Related To Russian Emergency Response Exercises

Contracts Identify Cyber Operations Projects from Russian Company NTC Vulkan

We (Did!) Start the Fire: Hacktivists Increasingly Claim Targeting of OT Systems

Screenshot 2023-12-02 8.31.43 AM.png

Pro-PRC “HaiEnergy” Information Operations Campaign Leverages Infrastructure from Public Relations Firm to Disseminate Content on Inauthentic News Sites

Gone Phishing: Hunting for Malicious Industrial-Themed Emails to Prevent Operational Technology Compromises

Mandiant Red Team Emulates FIN11 Tactics To Control Operational Technology Servers

INDUSTROYER.V2: Old Malware Learns New Tricks

INCONTROLLER: New State-Sponsored Cyber Attack Tools Target Multiple Industrial Control Systems

1 in 7 Ransomware Extortion Attacks Leak Critical Operational Technology Information

Introducing Mandiant's Digital Forensics and Incident Response Framework for Embedded OT Systems

Portable Executable File Infecting Malware Is Increasingly Found in OT Networks

Crimes of Opportunity: Increasing Frequency of Low Sophistication Operational Technology Compromises

Hacking Operational Technology for Defense: Lessons Learned From OT Red Teaming Smart Meter Control Infrastructure

In Pursuit of a Gestalt Visualization: Merging MITRE ATT&CK® for Enterprise and ICS to Communicate Adversary Behaviors

Hello From the OT Side!

A Hands-On Introduction to Mandiant's Approach to OT Red Teaming

Financially Motivated Actors Are Expanding Access Into OT: Analysis of Kill Lists That Include OT Processes Used With Seven Malware Families

Ransomware Against the Machine: How Adversaries are Learning to Disrupt Industrial Production by Targeting IT and OT

Monitoring ICS Cyber Operation Tools and Software Exploit Modules to Anticipate Future Threats

Call to Action: Mobilizing Community Discussion to Improve Information-Sharing About Vulnerabilities in Industrial Control Systems and Critical Infrastructure

The Mandiant Approach To Operational Technology Security

Fantastic Information and Where to Find It: A Guidebook to Open-Source OT Reconnaissance

The FireEye OT-CSIO: An Ontology to Understand, Cross-Compare, and Assess Operational Technology Cyber Security Incidents

TRITON Actor TTP Profile, Custom Attack Tools, Detections, and ATT&CK Mappings

ICS Tactical Security Trends: Analysis of the Most Frequent Risks Observed in the Field

Un vistazo a las implicaciones del uso de spyware en México

La gobernanza del ciberespacio y la incipiente participación de México
(From book: "México y el multilateralismo del siglo XXI : reflexiones a los 70 años de la ONU"

bottom of page