ConfickerMalware
- downadup
- kido
- traffic converter
RansomwareFrom MISP Galaxy
Last reported 3 years ago, by Huntress2 reports
ATT&CK techniques
1 technique · each with the sentence it comes from- T1505.003Web Shell
“Instead, identified tradecraft thus far, as documented by Huntress and others, indicates initial access was used to deploy a web shell.”
What the reports say
2 reports, newest first · the exact sentence from each-
Move It on Over: Reflecting on the MOVEit Exploitation“…s in the Windows operating system, such as MS17-010 (enabling the WannaCry event) or even MS08-67 (the infamous vulnerability enabling Conficker).”
-
Detect domain generation algorithm (DGA) activity with new Kibana integration“This technique emerged in the world of malware with force in 2009, when the “Conficker” worm began using a very large number of randomly generated domain names for communication.”
Thanks — we review every report.