Tag: av/edr bypass

1 Attack Reports | 0 Vulnerabilities

Attack reports

EDR Bypass Testing Reveals Extortion Actor's Toolkit

Unit 42 investigated an extortion attempt where threat actors tested an AV/EDR bypass tool on rogue systems with Cortex XDR installed. The actors purchased network access via Atera RMM and used a BYOVD technique for the bypass tool. Researchers gained visibility into the actors' systems, uncovering…

cybercrime forums

threat actor profiling

Published: November 2, 2024

Downloadable IOCs: 0

Click here to see more Attack Reports