Live Webinar
TRUINTELLIGENCE BRIEFING
Tuesday, August 12, 2025
11:00 AM - 11:45 AM ET | 8:00 - 8:45 AM PT
4:00 - 4:45 PM GMT
Join us on August 12th for this month’s TRU Intelligence Briefing
eSentire’s Threat Response Unit (TRU) is a team of industry-renowned experts with real-world experience who are battle-tested to protect you against the most advanced cyber threats.
TRU is foundational to our Managed Detection and Response (MDR) service – no add-ons or additional cost required.Every month, TRU hosts a live webinar to share new research-driven observations of malware, notable vulnerabilities, threat actor groups, and cyber activity affecting the threat landscape.
Our Threat Response Unit (TRU) will review:
- Machine Key Abuse: An overview of View State code injection attacks, a sophisticated technique exploiting publicly known or compromised keys to execute malicious code and establish persistent, stealthy footholds on servers. This method has gained significant attention due to the recent surge in "Toolshell" exploitation campaigns and will likely lead to wider adoption.
- ToolShell Observations: Observations surrounding ToolShell exploitation including the different webshells eSentire has investigated along with mitigation and detection recommendations.
- Threat Landscape: Malware observed by eSentire’s SOC (Interlock Backdoor, ShadowCoil, WEEVILPROXY), and recently disclosed critical vulnerabilities (CVE-2025-54309 [CrushFTP], CVE-2025-20281 & CVE-2025-20337 [Cisco], CVE-2025-47812 [WingFTP]).
- A brief geopolitical update on Chinese state-sponsored APT activity.
Session Speakers
Paul Aitken
Manager, Threat Intelligence
Bohan Zhang
Threat Intelligence Analyst
Mohammad Amr Khan
Senior Threat Researcher
Spence Hutchinson
Senior Manager, Threat Intelligence Research
