# Proofpoint's TA410 Report Shows How Attack Details Can Inform Better Defenses

DevFeed: [Proofpoint's TA410 Report Shows How Attack Details Can Inform Better Defenses](<https://devfeed.tech/articles/threat-research-more-like-this-37056.md>)

Original publisher: [Read original article](<https://shostack.org/blog/threat-research-more-like-this/>)

Author: Adam

Published: 2020-06-14T00:00:00Z

Content type: opinion

Language: en

Sources: [Shostack & Friends Blog](<https://devfeed.tech/sources/shostack-friends-blog.md>)

Topics: [Threat Research](<https://devfeed.tech/topics/threat-research.md>), [proofpoint](<https://devfeed.tech/topics/proofpoint.md>), [Malware](<https://devfeed.tech/topics/malware.md>), [Actor](<https://devfeed.tech/topics/actor.md>), [Code](<https://devfeed.tech/topics/code.md>), [execution](<https://devfeed.tech/topics/execution.md>), [file](<https://devfeed.tech/topics/file.md>)

Tags: [actor](<https://devfeed.tech/tags/actor.md>), [attacks](<https://devfeed.tech/tags/attacks.md>), [code](<https://devfeed.tech/tags/code.md>), [commands](<https://devfeed.tech/tags/commands.md>), [defender](<https://devfeed.tech/tags/defender.md>), [delivery](<https://devfeed.tech/tags/delivery.md>), [execution](<https://devfeed.tech/tags/execution.md>), [file](<https://devfeed.tech/tags/file.md>), [malware](<https://devfeed.tech/tags/malware.md>), [proofpoint](<https://devfeed.tech/tags/proofpoint.md>), [report](<https://devfeed.tech/tags/report.md>), [research](<https://devfeed.tech/tags/research.md>), [threat-research](<https://devfeed.tech/tags/threat-research.md>)

## AI overview

The article praises Proofpoint's report on TA410 attacks against U.S. utilities for its factual analysis and detailed explanation of the attack chain. It argues that details such as malicious macros, file renaming, cmd use, certutil execution, and delivery infrastructure can help defenders design better protections.

## Source excerpt

I want to call out some impressive aspects of a report by Proofpoint.