Priya Nair — Digital Forensics Analyst Key TakeawaysActors exploited a vulnerability in the organization’s email system for initial access.The malware deployed included the well-known REvil ransomware variant, enabling data exfiltration before encryption.Strategies for C2 communications…
Priya Nair — Digital Forensics Analyst Key TakeawaysThe actor utilized a sophisticated phishing technique involving malicious Office documents to establish initial access.We observed the use of a backdoor implant that facilitates remote command execution, leveraging…
Priya Nair — Digital Forensics Analyst Key TakeawaysInsider threat simulations show targeting via phishing emails using malicious Excel documents.The attack employed Cobalt Strike for lateral movement and persistence within the network.Utilization of PowerShell for execution…
Priya Nair — Digital Forensics Analyst Key TakeawaysCustom malware with unique command and control channels enhances persistence and stealth.Phishing emails were crafted to exploit employee trust, leading to the initial compromise.The actor utilized lateral movement…
Priya Nair — Digital Forensics Analyst Key TakeawaysAdvanced persistent threats utilize a multi-faceted approach to maintain persistence and evade detection.Sunburst malware demonstrates a sophisticated command and control infrastructure leveraging multiple protocols.Detailed analysis reveals lateral movement…
Priya Nair — Digital Forensics Analyst Key TakeawaysMalicious payloads were delivered via deceptive email campaigns targeting financial institutions.The malware employs advanced techniques for persistence that complicate detection efforts.Indicators of compromise (IOCs) revealed critical infrastructure components…
Priya Nair — Digital Forensics Analyst Key TakeawaysThe attack chained multiple techniques from initial phishing to Qakbot deployment, leading to subsequent ransomware payload deployment.The prominent use of T1071 – Application Layer Protocol indicated sophisticated command…
Priya Nair — Digital Forensics Analyst Key TakeawaysPhishing emails initiated the attack chain, showcasing the actor's proficiency in crafting targeted communication.Cobalt Strike was utilized to gain persistence and establish command and control, allowing for robust…
Priya Nair — Digital Forensics Analyst Key TakeawaysThe threat actor employed T1193 – Spear Phishing Link to initiate the attack chain.We detected the use of a custom PowerShell dropper to execute the payload and maintain…
Priya Nair — Digital Forensics Analyst Key TakeawaysThe malware employs sophisticated social engineering techniques for initial access.Malware persistence mechanisms include registry modifications and scheduled tasks.Command and Control (C2) communications leverage domain fronting for stealthy exfiltration.Executive…