All That for a Coinminer? A threat actor recently brute forced a local administrator password using RDP and then dumped cr... 2021-01-19 08:53:31 | 阅读: 104 | 收藏 | thedfirreport.com kuhl lsadump mimikatz svshost xmrig

Trickbot Still Alive and Well In October of 2020, the group behind the infamous botnet known as Trickbot had a bad few days. T... 2021-01-11 11:37:17 | 阅读: 116 | 收藏 | thedfirreport.com windows cobalt 449 goodware occured

Defender Control Defender Control is a free software utility we’ve come across in various intrusions. The creator... 2020-12-14 07:00:09 | 阅读: 107 | 收藏 | thedfirreport.com defender windows microsoft dfir

PYSA/Mespinoza Ransomware IntroOver the course of 8 hours the PYSA/Mespinoza threat actors used Empire and Koadic as well... 2020-11-23 11:47:31 | 阅读: 117 | 收藏 | thedfirreport.com koadic powershell windows c2 defender

Cryptominers Exploiting WebLogic RCE CVE-2020-14882 IntroTowards the end of October, we started seeing attackers take advantage of a WebLogic RCE v... 2020-11-12 09:23:53 | 阅读: 104 | 收藏 | thedfirreport.com miner xmrig powershell payload windows

Ryuk Speed Run, 2 Hours to Ransom IntroSince the end of September Ryuk has been screaming back into the news. We’ve already cover... 2020-11-06 02:19:17 | 阅读: 110 | 收藏 | thedfirreport.com windows taskkill adfind mutex