Tag: vpn compromise

2 Attack Reports | 0 Vulnerabilities

Attack reports

Employee Monitoring and SimpleHelp Software Abused in Ransomware Operations

Threat actors have been observed exploiting Net Monitor for Employees Professional and SimpleHelp software in ransomware operations. These legitimate tools were used for remote access, command execution, and persistence. The attackers disguised Net Monitor as Microsoft OneDrive and configured Simpl…

crazy ransomware

employee monitoring

Published: February 12, 2026

Downloadable IOCs: 8

Understanding the Initial Stages of Web Shell and VPN Threats: An MXDR Analysis

This analysis examines two cybersecurity incidents: a web shell attack and a VPN compromise. The web shell attack involved uploading malicious files to a server, executing commands, creating a local admin account, and attempting to establish persistence. The VPN compromise led to lateral movement, …

lateral movement

privilege escalation

defense evasion

Published: October 24, 2024

Linked vulnerabilities : CVE-2020-1472

Downloadable IOCs: 1

Click here to see more Attack Reports