(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
Related Posts
TA551 (Shathak) Word docs push IcedID (Bokbot), (Fri, Aug 7th)
Introduction I've been tracking malicious Word documents from the TA551 (Shathak) campaign This year, we've…
0

Building an IDS Sensor with Suricata & Zeek with Logs to ELK, (Sat, Apr 10th)
Over the past several years I have used multiple pre-built sensors using readily available ISO…
0
Qakbot infection with Cobalt Strike and VNC activity, (Wed, Mar 16th)
Introduction On Monday 2022-03-14, I infected a vulnerable Windows host with Qakbot (Qbot) malware. Approximately…
0
