Tag: anti-forensics

2 Attack Reports | 0 Vulnerabilities

Attack reports

Live off the Land? How About Bringing Your Own Island? An Overview of UNC1945

UNC1945 compromised managed service providers to target organizations within financial and professional consulting industries through third-party network access. The actor demonstrated advanced capabilities across Oracle Solaris, Windows, and Linux systems, utilizing custom virtual machines pre-loa…
CVE-2019-0708
financial sector
ssh tunneling
tinyshell
anti-forensics
2026-04-17
CVE-2020-14871
evilsun
lemonstick
logbleach
managed service providers
oksolo
openshackle
oracle solaris
pam backdoor
pupyrat
rollcoast
slapstick
steelcorgi
unc1945
virtual machines
Published: April 17, 2026
Linked vulnerabilities : CVE-2019-0708, CVE-2020-14871
Downloadable IOCs: 5

StilachiRAT analysis: From system reconnaissance to cryptocurrency theft

Microsoft Incident Response researchers discovered a novel remote access trojan named StilachiRAT, demonstrating sophisticated evasion, persistence, and data exfiltration techniques. The malware collects extensive system information, targets cryptocurrency wallet extensions, steals browser credenti…
persistence
credential theft
cryptocurrency theft
command and control
remote access trojan
2025-03-17
stilachirat
system reconnaissance
anti-forensics
rdp monitoring
Published: March 17, 2025
Linked vulnerabilities : CVE-2023-36884
Downloadable IOCs: 2
Click here to see more Attack Reports