Tag: rubeus

2 Attack Reports | 0 Vulnerabilities

Attack reports

EDR Bypass Testing Reveals Extortion Actor's Toolkit

Unit 42 investigated an extortion attempt where threat actors tested an AV/EDR bypass tool on rogue systems with Cortex XDR installed. The actors purchased network access via Atera RMM and used a BYOVD technique for the bypass tool. Researchers gained visibility into the actors' systems, uncovering…

cybercrime forums

threat actor profiling

Published: November 2, 2024

Downloadable IOCs: 0

BlackSuit Ransomware

The report meticulously chronicles a sophisticated intrusion which began in December 2023 and culminated in the deployment of BlackSuit ransomware approximately 15 days later. The threat actor demonstrated an array of tactics, leveraging tools like Cobalt Strike, Sharphound, and SystemBC, alongside…

lateral movement

credential access

get-datainfo.ps1

Published: August 27, 2024

Downloadable IOCs: 16

Click here to see more Attack Reports