Category: Deep Dives

Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe attack utilized exploit kits targeting RDP vulnerabilities for initial access.Persistence mechanisms included scheduled tasks and registry modifications.Beaconing behavior was established through customized domains ensuring robust C2 communications.Executive…

Alex Morgan — Threat Intelligence Analyst Key TakeawaysThe 'Noky' malware utilizes social engineering to gain initial access, typically through phishing emails leading to credential theft.Our analysis identified the use of T1059.001 – PowerShell for executing…