Sys-Admin & InfoSec Channel(@sysadm_in_channel). / Malvertising Used as Entry Vector for BlackCat, Actors Also Leverage SpyBoy Terminator Malicious

Sys-Admin & InfoSec Channel

13884 @sysadm_in_channel

Открыть

Посты с ИТ-ресурсов, новости, тулзы, хакинг, администрирование, возможны бредовые посты с мемами, поздравлениями, может даже хейтами..

Sys-Admin & InfoSec Channel

@sysadm_in_channel 3 года назад

Открыть в

/ Malvertising Used as Entry Vector for BlackCat, Actors Also Leverage SpyBoy Terminator Malicious actors used malvertising to distribute malware via cloned webpages of legitimate organizations. The distribution involved a webpage of the well-known application WinSCP, an open-source Windows application for file transfer via Google Ads... www.trendmicro.com/en_us/r…ver.html P.S. IOC domains sends to OpenBLD.net DNS watch lists

Malvertising Used as Entry Vector for BlackCat Actors Also Leverage SpyBoy Terminator

We found that malicious actors used malvertising to distribute malware via cloned webpages of legitimate organizations. The distribution involved a webpage of the well-known application WinSCP, an open-source Windows application for file transfer. We were able to identify that this activity led to a BlackCat (aka ALPHV) infection, and actors also used SpyBoy, a terminator that tampers with protection provided by agents.

Trend Micro