Tom Hegel

VISIT SENTINELONE.COM

Tom Hegel

Tom Hegel is a Principal Threat Researcher with SentinelOne. He comes from a background of detection and analysis of malicious actors, malware, and global events with an application to the cyber domain. His past research has focused on threats impacting individuals and organizations across the world, primarily targeted attackers.

SOC Team Essentials | How to Investigate and Track the 8220 Gang Cloud Threat

From the Front Lines | 7 minute read

Cloud Credentials Phishing | Malicious Google Ads Target AWS Logins

From the Front Lines | 6 minute read

Breaking Down the SEO Poisoning Attack | How Attackers Are Hijacking Search Results

From the Front Lines | 6 minute read

NoName05716 The Pro Russian Hacktivist Group Targeting NATO 2

NoName057(16) – The Pro-Russian Hacktivist Group Targeting NATO

Tom Hegel / January 12, 2023

In the name of Russia's war in Ukraine, NoName057(16) abuses GitHub and Telegram in an ongoing campaign to disrupt NATO's critical infrastructure.

8220 Gang Cloud Botnet Targets Misconfigured Cloud Workloads

From the Front Lines | 6 minute read

The Sprawling Infrastructure Of A Careless Mercenary 3

Void Balaur | The Sprawling Infrastructure of a Careless Mercenary

Tom Hegel / September 22, 2022

The Void Balaur cyber mercenary group has thrived throughout 2022, attacking targets on a global scale with new phishing campaigns.

From the Front Lines | 8220 Gang Massively Expands Cloud Botnet to 30,000 Infected Hosts

From the Front Lines | 14 minute read

Targets Of Interest Russian Organizations Increasingly Under Attack By Chinese APTs 7

Targets of Interest | Russian Organizations Increasingly Under Attack By Chinese APTs

Tom Hegel / July 7, 2022

Chinese-linked phishing campaign seeks to compromise Russian targets with custom malware designed for espionage.

Threat Landscape | The Most Dangerous Cloud Attack Methods In The Wild Today

Cloud, For CISO/CIO | 6 minute read

Putting Things In Context Timelining Threat Campaigns Tom

Security Research

Putting Things in Context | Timelining Threat Campaigns

Tom Hegel / May 11, 2022

Visualizing data is integral to threat research. See how we used this timeline analysis tool to track activity in the Ukrainian cyber conflict.

1 2 3

SentinelLabs

In the era of interconnectivity, when markets, geographies, and jurisdictions merge in the melting pot of the digital domain, the perils of the threat ecosystem become unparalleled. Crimeware families achieve an unparalleled level of technical sophistication, APT groups are competing in fully-fledged cyber warfare, while once decentralized and scattered threat actors are forming adamant alliances of operating as elite corporate espionage teams.

Recent Posts

LABScon23 Replay | Meet the Iranian Company Powering Russia’s Drone War on Ukraine
April 23, 2024
AcidPour | New Embedded Wiper Variant of AcidRain Appears in Ukraine
March 21, 2024
Doppelgänger | Russia-Aligned Influence Operation Targets Germany
February 22, 2024

Sign Up

Get notified when we post new content.

Thanks! Keep an eye out for new content!

Twitter
LinkedIn

©2024 SentinelOne, All Rights Reserved.