SecuriTricks - lateral movement

Attack Reports

Title	Published	Tags	Description	Number of indicators
StopRansomware: RansomHub Ransomware	Aug. 30, 2024, 5:44 p.m.	privilege-escalation cobalt strike encryption CVE-2020-1472 ransomware-as-a-service ransomhub mimikatz CVE-2023-3519 2024-08-30 metasploit CVE-2023-22515 CVE-2023-46604 CVE-2017-0144 CVE-2023-48788 double-extortion CVE-2023-27997 data-exfiltration CVE-2023-46747 critical-infrastructure CVE-2020-0787 lateral-movement	RansomHub is a ransomware-as-a-service variant that has targeted over 210 victims across various critical infrastructure sectors …	14
BlackSuit Ransomware	Aug. 27, 2024, 8:35 a.m.	ransomware cobalt strike discovery lateral movement credential access cobaltstrike blacksuit systembc 2024-08-27 sharphound get-datainfo.ps1 rubeus	The report meticulously chronicles a sophisticated intrusion which began in December 2023 and culminated in the deployment of Bla…	16
CheckMesh: Hidden Threats in Your FW	Aug. 5, 2024, 8:43 a.m.	credential theft lateral movement 2024-08-05 meshagent encrypted communication advanced persistent threat firewall compromise	This report examines an advanced cyber-attack targeting an Israeli enterprise, where a sophisticated threat actor compromised a C…	9
BITS and Bytes: Analyzing BITSLOTH, a newly identified backdoor	Aug. 2, 2024, 9:57 a.m.	backdoor espionage exfiltration persistence lateral movement 2024-08-02 bitsloth	Elastic Security Labs uncovered a new Windows backdoor called BITSLOTH that utilizes the Background Intelligent Transfer Service …	8
Lost in the Fog: A New Ransomware Threat	June 7, 2024, 10:34 a.m.	ransomware encryption lateral movement credential 2024-06-07 backup deletion foggyweb	Arctic Wolf Labs began monitoring the deployment of a new ransomware variant called Fog in early May 2024. The ransomware attacks…	5
Operation Crimson Palace: A Technical Deep Dive	June 6, 2024, 7:55 a.m.	malware cobalt strike cyberespionage lateral movement intrusion 2024-06-06 impersoni-fake-ator powheartbeat credential access pocoproxy rudebird phantomnet ccoredoor eagerbee nupakage	Sophos Managed Detection and Response initiated a threat hunt across customers after detecting abuse of a vulnerable VMware execu…	138
Technical Deep Dive: Understanding the Anatomy of a Cyber Intrusion	May 24, 2024, 1:52 p.m.	persistence CVE-2024-21887 CVE-2023-46805 2024-05-24 threat lateral movement wirefire giftedvisitor bushwalk intrusion cyberattack beeflush rootrot brickstorm	This report details a sophisticated cyber intrusion targeting MITRE's research network (NERVE) through the exploitation of Ivanti…	4

» Click here to see all Attack Reports «

Tag : lateral movement