SecuriTricks - sliver

Attack Reports

Title	Published	Tags	Description	Number of indicators
Threat Actors’ Toolkit: Leveraging Sliver, PoshC2 & Batch Scripts	Aug. 12, 2024, 11:45 a.m.	evasion sliver 2024-08-12 batch poshc2 scripts	An investigation by The DFIR report revealed a collection of batch scripts designed for defense evasion and executing command-and…	32
Array of malware used to gather intelligence for North Korea	July 29, 2024, 10:21 a.m.	espionage north korea CVE-2021-44228 sliver smalltiger 2024-07-29 dtrack CVE-2023-27350 tigerrat CVE-2023-42793 lighthand validalpha	Microsoft Threat Intelligence analyzes the activities of the North Korean threat actor Onyx Sleet, which conducts cyber espionage…	24
Supposed Grasshopper: operators impersonate Israeli government and private companies to deploy open-source malware	June 28, 2024, 2:58 p.m.	impersonation wordpress sliver golang 2024-06-28 open-source donut virtual disk	A long-running campaign was identified involving malicious actors impersonating Israeli entities and private companies. The opera…	18
Ongoing Malvertising Campaign leads to Ransomware	May 15, 2024, 3:14 p.m.	malware ransomware python cobalt strike 2024-05-15 2024-05-10 msi package winscp sliver putty service execution localappdata dropped c2 address sliver beacon dnstwist	Rapid7 detected an ongoing malware distribution campaign involving trojanized installers of WinSCP and PuTTY, delivered via malic…	78