Tag: spicyomelette

2 Attack Reports | 0 Vulnerabilities

Attack reports

The Curious Case of an Excellent Resume

This report details a malicious campaign where the threat actor gained initial access through a resume lure as part of a TA4557/FIN6 operation. The actor employed techniques like abusing legitimate binaries, establishing Cobalt Strike and Pyramid C2, exploiting CVE-2023-27532 for lateral movement, …

privilege-escalation

lateral-movement

Published: December 4, 2024

Downloadable IOCs: 20

MDR in Action: Preventing The More_eggs Backdoor From Hatching

A sophisticated spear-phishing attack led to a more_eggs backdoor infection at a company. The attack began with an email to a senior executive, followed by a recruitment officer downloading a fake resume. The malicious file, disguised as a resume, contained obfuscated commands that executed when op…

malware-as-a-service

golden chickens

Published: October 1, 2024

Downloadable IOCs: 10

Click here to see more Attack Reports