Sarah Chen — Malware Reverse Engineer Key TakeawaysThe attack utilized a familiar Poison Ivy variant for initial access and persistence.Command and Control (C2) communications were found leveraging unsecured protocols, raising significant red flags.Detection of lateral…
Sarah Chen — Malware Reverse Engineer Key TakeawaysAPT33 uses spear-phishing emails with malicious attachments to achieve initial access to target networks.We identified the use of PowerShell scripts as part of the execution phase, ensuring persistence…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThis attack primarily exploited phishing emails with malicious attachments.The implant used follows the TTPs associated with Initial Access and Execution.Indicators of compromise (IOCs) revealed a sophisticated Command and…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe campaign extensively uses embedded macros in malicious Office documents as the initial access vector.We identified callbacks to a custom C2 server, revealing the adversary's infrastructure and operational…
Sarah Chen — Malware Reverse Engineer Key TakeawaysTekton employs sophisticated social engineering tactics for initial access via malicious email attachments.The malware implements persistence through registry modification and scheduled tasks.Command and Control (C2) communications leverage encrypted…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThis ransomware employs a sophisticated multi-stage attack chain, leveraging phishing for initial access.Our investigation revealed extensive use of living-off-the-land tactics for persistence and lateral movement.Indicators of Compromise (IOCs)…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe malware employs a modular structure that allows for dynamic payload delivery and execution.Initial access is commonly achieved via phishing campaigns, often using weaponized documents.Command and Control (C2)…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe attack chain leverages phishing emails to gain initial access into the target environment.Persistence mechanisms involve the modification of registry keys and the use of scheduled tasks.Command and…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe XYZ Ransomware employs sophisticated evasion techniques to bypass traditional security mechanisms.The actor utilized phishing emails as the initial access vector, leveraging social engineering to gain foothold.Effective detection…
Sarah Chen — Malware Reverse Engineer Key TakeawaysThe initial access vector leveraged the Sudo-K vulnerability to gain elevated privileges on Linux systems.The actor utilized a combination of custom malware and existing toolsets to achieve persistence…