{"id":16204,"date":"2021-06-24T14:39:44","date_gmt":"2021-06-24T13:39:44","guid":{"rendered":"https:\/\/www.riskinsight-wavestone.com\/?p=16204"},"modified":"2021-09-14T11:50:46","modified_gmt":"2021-09-14T10:50:46","slug":"newsletter-cert-w-june-2021","status":"publish","type":"post","link":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/","title":{"rendered":"Newsletter CERT-W, from the front line – June 2021"},"content":{"rendered":"
\"\"<\/figure>\n

DECRYPTION<\/strong><\/h1>\n

CYBER CRIMINAL NETWORK DISMANTELING<\/h2>\n

The last 6 months, large-scale coordinated international actions have dismantled several of the biggest cybercriminal networks such as Emotet, Netwalker, Egregor or even Cl0p. Let\u2019s have a closer look at some of them.<\/strong><\/p>\n

What is Emotet?<\/strong><\/p>\n

Emotet was originally a banking trojan,<\/strong> stealing emails and contact list, retrieving passwords on navigators and systems, spreading within the infected network. In 2019, Emotet lost its banking module and became a dropper<\/strong> of malwares. The trojan used a botnet of 1.6 million machines<\/strong><\/a>  to realize phishing campaign and install itself on victims\u2019 machines.<\/p>\n

Why is Emotet called the \u201cking of malware\u201d?<\/strong><\/p>\n

At the end of 2020, Emotet was identified as one of the most dangerous malwares<\/strong><\/a>. Additionally, being a dropper as well as a botnet, Emotet also served as a front door<\/strong> to many other malwares. It was used to drop malicious payloads directly onto the victims\u2019 assets: for example, TrickBot was dropped onto the targeted machine which in turn, would drop Ryuk or Conti ransomware<\/strong>. According to Checkpoint Research, Emotet was at the top of the Global Threat Index in October 2020 and was linked to a wave of ransomware attacks<\/strong><\/a>. According to CISA, the U.S. Cybersecurity & Infrastructure Security Agency, Emotet infections cost is estimated at $1 million per incident<\/strong><\/a>.<\/strong><\/p>\n

 <\/p>\n

\"\"<\/figure>\n

Main TA542\u2019s customer base, \u201cThe Malware As a Service EMOTET\u201d, ANSSI 2021<\/em><\/p>\n

 <\/p>\n

During several months, Europol used the help of Eurojust, France, Germany, United States of America and announced their successful dismantle of the Emotet network in January 2021.<\/p>\n

Does this dismantling mean the end of the malware?<\/strong><\/p>\n

The end of one botnet actually led to the rise of several others<\/strong><\/a>, such as TrickBot, which even though existed since 2016, replaced Emotet as one of the most well-established MaaS (Malware as a Service) not long after the events on January.<\/p>\n

This turn of events might not be so surprising, as threat actors often pivot and change their tools along the way, whether by choice or by necessity as it was the case here. Taking one malware down would only force them to use another one. Yet, what is interesting is that TrickBot also suffered a dismantlement of its own<\/strong><\/a>, back in October 2020. In an attempt to disrupt one of the most used distributors of ransomware, Microsoft joined forces with other security teams to take down TrickBot servers. As you may have noticed, this was months before law-enforcement took down Emotet, and now TrickBot or other versions of this malware, still lives on<\/strong><\/a>. These actions only disrupted TrickBot activities for a few days, before going back to what it was and even overtaking Emotet dominance<\/strong>.<\/p>\n

Moreover, TrickBot seems to be somehow connected to the Bazar<\/a><\/strong> malware (BazarLoader and BazarBackdoor), as some part of its infrastructure is shared with TrickBot and both show code similarities. This new toolset is now the most seen malware used to deploy Ryuk ransomware instead of the previous Emotet-TrickBot-Ryuk or TrickBot-Ryuk chain of infection. These changes might have to do with the previously mentioned dismantlements, or due to a new collaboration between threat actors.<\/p>\n

What about the people behind these groups?<\/strong><\/p>\n

More recently, on June 4th, Alla Witte was charged on multiple counts<\/strong><\/a> for participating in TrickBot criminal activities. Is this arrest, serving as a warning with several hundreds of years of prison if convicted, going to change cybercriminals\u2019 operations? A few months before that, the Ukrainian authorities cooperated with the French law enforcement to conduct an arrest against Egregor members<\/strong><\/a>, while a Canadian tied to Netwalker ransomware was charged<\/strong> <\/a>by the police for distributing the malware. Last year was also marked by several other arrests of cybercriminals around the world. For instance, the arrest of members of the Infinity Black website <\/strong><\/a>selling user credentials, lead to the end of the website and the group altogether. On the other hand, the arrests mentioned regarding Netwalker and Egregor seem to concern ransomware affiliates. And as the operators are still free and collaborate with other affiliates, their ransomware continues being deployed around the world. Alla Witte\u2019s case is different since she is suspected to be a malware developer for the TrickBot Group. While her possible conviction might slightly disrupt TrickBot, it seems like their operations still go on, as according to the any.run website and its malware trend tracker, the trojan was last seen on June 16th, 2021<\/a>. Last but not least, some mid-tier members of the Cl0p gang may have been arrested<\/a> mid-June in Ukraine even though it seems no core actor behind Cl0p were apprehended.<\/p>\n

What could be the long-term consequences of these takedown for the cybercriminal activities?<\/strong><\/p>\n

It\u2019s still early to draw meaningful conclusions on the consequences for cybercriminal activities with the recent arrests. Yesterday, June 16th, at the Geneva summit, U.S. President Joe Biden met with Russian President Vladimir Putin<\/strong><\/a>. One of the hot topics of discussions was the ransomware attacks on U.S. entities from Russian soil<\/strong>. Biden warned Putin that United States would not tolerate any other cyber-attacks, especially on 16 critical sectors. The G7<\/strong><\/a> and the NATO<\/strong><\/a> also stated that in order not to consider cyber-attacks as armed attacks, Russia should try to identify and disrupt ransomware organizations within its borders.<\/p>\n

Even with the arrests of criminal gang members and cybersecurity talks at the presidential levels, some experts say there would be no or little impact on ransomware groups that will still operate with impunity<\/strong>. The near future will give hints about the possible evolution of the cyber-attacks landscape. On one hand, the rising of a broader international collaboration against cyber-criminal gangs which could lead to less opportunistic and lucrative attacks. On the other hand, growing tensions between two blocks: U.S.-Europe and Russia-China with possible sanctions from either side and more cyber espionage, supply-chain or state-sponsored attacks.<\/p>\n

 <\/p>\n

CERT-W: FROM THE FRONT LINE<\/strong><\/h1>\n

The First Responder Word<\/h2>\n
\n
\"\"<\/figure>\n<\/figure>\n

<\/h1>\n

 <\/p>\n

FOCUS TECH<\/strong><\/h1>\n

Phishing<\/h2>\n

Think like a cybercriminal and understand how a spear phishing campaign is built to avoid them!<\/p>\n

The technical zoom of the month:<\/p>\n

\"\"<\/figure>\n

 <\/p>\n

To learn more about this:<\/strong><\/p>\n

\"\"<\/a><\/figure>\n

 <\/p>\n

Reading Of The Month<\/strong><\/h1>\n

We recommend the short report \u201cAPT trends report Q1 2021\u201d, which reviews the highlight events and findings observed by the Global Research and Analysis Team at Kaspersky during the Q1 2021 around the world.<\/p>\n

\"\"<\/a><\/figure>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

DECRYPTION CYBER CRIMINAL NETWORK DISMANTELING The last 6 months, large-scale coordinated international actions have dismantled several of the biggest cybercriminal networks such as Emotet, Netwalker, Egregor or even Cl0p. Let\u2019s have a closer look at some of them. What is Emotet?…<\/p>\n","protected":false},"author":1364,"featured_media":14576,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"page-templates\/tmpl-one.php","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[3973,3273],"tags":[3923,3487,2772,3925,3934,3479,3438,2944,3926,3924],"coauthors":[3488],"class_list":["post-16204","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cert-newsletter","category-ethical-hacking-indicent-response-en","tag-cdt","tag-cert-w-en","tag-cybersecurity","tag-emotet","tag-front-line","tag-indicators","tag-malware-en","tag-newsletter","tag-phishing-en","tag-watch"],"acf":[],"yoast_head":"\nNewsletter CERT-W, from the front line - June 2021 - RiskInsight<\/title>\n<meta name=\"description\" content=\"Newsletter CERT-W June 2021 has been published to help you find the latest news on cybersecurity.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Newsletter CERT-W, from the front line - June 2021 - RiskInsight\" \/>\n<meta property=\"og:description\" content=\"Newsletter CERT-W June 2021 has been published to help you find the latest news on cybersecurity.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/\" \/>\n<meta property=\"og:site_name\" content=\"RiskInsight\" \/>\n<meta property=\"article:published_time\" content=\"2021-06-24T13:39:44+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-09-14T10:50:46+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2020\/11\/Fotolia_76258822_Subscription_Monthly_M.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1641\" \/>\n\t<meta property=\"og:image:height\" content=\"1158\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"CERT-W\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"CERT-W\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/\"},\"author\":{\"name\":\"CERT-W\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/b3138a95b8559cf24bf256c8e9994eca\"},\"headline\":\"Newsletter CERT-W, from the front line – June 2021\",\"datePublished\":\"2021-06-24T13:39:44+00:00\",\"dateModified\":\"2021-09-14T10:50:46+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/\"},\"wordCount\":1141,\"publisher\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2020\/11\/Fotolia_76258822_Subscription_Monthly_M.jpg\",\"keywords\":[\"CDT\",\"CERT-W\",\"cybersecurity\",\"emotet\",\"front line\",\"indicators\",\"malware\",\"Newsletter\",\"phishing\",\"watch\"],\"articleSection\":[\"CERT Newsletter\",\"Ethical Hacking & Incident Response\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/\",\"name\":\"Newsletter CERT-W, from the front line - June 2021 - RiskInsight\",\"isPartOf\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2020\/11\/Fotolia_76258822_Subscription_Monthly_M.jpg\",\"datePublished\":\"2021-06-24T13:39:44+00:00\",\"dateModified\":\"2021-09-14T10:50:46+00:00\",\"description\":\"Newsletter CERT-W June 2021 has been published to help you find the latest news on cybersecurity.\",\"breadcrumb\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#primaryimage\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2020\/11\/Fotolia_76258822_Subscription_Monthly_M.jpg\",\"contentUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2020\/11\/Fotolia_76258822_Subscription_Monthly_M.jpg\",\"width\":1641,\"height\":1158},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\/\/www.riskinsight-wavestone.com\/en\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Newsletter CERT-W, from the front line – June 2021\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#website\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/\",\"name\":\"RiskInsight\",\"description\":\"The cybersecurity & digital trust blog by Wavestone's consultants\",\"publisher\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.riskinsight-wavestone.com\/en\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#organization\",\"name\":\"Wavestone\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png\",\"contentUrl\":\"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png\",\"width\":50,\"height\":50,\"caption\":\"Wavestone\"},\"image\":{\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/b3138a95b8559cf24bf256c8e9994eca\",\"name\":\"CERT-W\",\"url\":\"https:\/\/www.riskinsight-wavestone.com\/en\/author\/cert-w\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Newsletter CERT-W, from the front line - June 2021 - RiskInsight","description":"Newsletter CERT-W June 2021 has been published to help you find the latest news on cybersecurity.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/","og_locale":"en_US","og_type":"article","og_title":"Newsletter CERT-W, from the front line - June 2021 - RiskInsight","og_description":"Newsletter CERT-W June 2021 has been published to help you find the latest news on cybersecurity.","og_url":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/","og_site_name":"RiskInsight","article_published_time":"2021-06-24T13:39:44+00:00","article_modified_time":"2021-09-14T10:50:46+00:00","og_image":[{"width":1641,"height":1158,"url":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2020\/11\/Fotolia_76258822_Subscription_Monthly_M.jpg","type":"image\/jpeg"}],"author":"CERT-W","twitter_misc":{"Written by":"CERT-W","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#article","isPartOf":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/"},"author":{"name":"CERT-W","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/b3138a95b8559cf24bf256c8e9994eca"},"headline":"Newsletter CERT-W, from the front line – June 2021","datePublished":"2021-06-24T13:39:44+00:00","dateModified":"2021-09-14T10:50:46+00:00","mainEntityOfPage":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/"},"wordCount":1141,"publisher":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#organization"},"image":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#primaryimage"},"thumbnailUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2020\/11\/Fotolia_76258822_Subscription_Monthly_M.jpg","keywords":["CDT","CERT-W","cybersecurity","emotet","front line","indicators","malware","Newsletter","phishing","watch"],"articleSection":["CERT Newsletter","Ethical Hacking & Incident Response"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/","url":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/","name":"Newsletter CERT-W, from the front line - June 2021 - RiskInsight","isPartOf":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#primaryimage"},"image":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#primaryimage"},"thumbnailUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2020\/11\/Fotolia_76258822_Subscription_Monthly_M.jpg","datePublished":"2021-06-24T13:39:44+00:00","dateModified":"2021-09-14T10:50:46+00:00","description":"Newsletter CERT-W June 2021 has been published to help you find the latest news on cybersecurity.","breadcrumb":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#primaryimage","url":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2020\/11\/Fotolia_76258822_Subscription_Monthly_M.jpg","contentUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2020\/11\/Fotolia_76258822_Subscription_Monthly_M.jpg","width":1641,"height":1158},{"@type":"BreadcrumbList","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/2021\/06\/newsletter-cert-w-june-2021\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.riskinsight-wavestone.com\/en\/"},{"@type":"ListItem","position":2,"name":"Newsletter CERT-W, from the front line – June 2021"}]},{"@type":"WebSite","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#website","url":"https:\/\/www.riskinsight-wavestone.com\/en\/","name":"RiskInsight","description":"The cybersecurity & digital trust blog by Wavestone's consultants","publisher":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.riskinsight-wavestone.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#organization","name":"Wavestone","url":"https:\/\/www.riskinsight-wavestone.com\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/","url":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png","contentUrl":"https:\/\/www.riskinsight-wavestone.com\/wp-content\/uploads\/2021\/08\/Monogramme\u2013W\u2013NEGA-RGB-50x50-1.png","width":50,"height":50,"caption":"Wavestone"},"image":{"@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/www.riskinsight-wavestone.com\/en\/#\/schema\/person\/b3138a95b8559cf24bf256c8e9994eca","name":"CERT-W","url":"https:\/\/www.riskinsight-wavestone.com\/en\/author\/cert-w\/"}]}},"_links":{"self":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts\/16204","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/users\/1364"}],"replies":[{"embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/comments?post=16204"}],"version-history":[{"count":12,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts\/16204\/revisions"}],"predecessor-version":[{"id":16786,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/posts\/16204\/revisions\/16786"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/media\/14576"}],"wp:attachment":[{"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/media?parent=16204"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/categories?post=16204"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/tags?post=16204"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/www.riskinsight-wavestone.com\/en\/wp-json\/wp\/v2\/coauthors?post=16204"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}