DataleakMalware
Last reported 3 years ago, by Huntress1 report
ATT&CK techniques
6 of 15 · each with the sentence it comes from- T1003OS Credential Dumping
“Credential Access - OS Credential Dumping/T1003.001”
- T1003.001LSASS Memory
“Credential Access - OS Credential Dumping/T1003.001”
- T1021.001Remote Desktop Protocol
“Lateral Movement - Remote Services/T1021.001, T1021.002”
- T1021.002SMB/Windows Admin Shares
“Lateral Movement - Remote Services/T1021.001, T1021.002”
- T1047Windows Management Instrumentation
“Execution - Command and Scripting Interpreter/T1059.001, T1059.003; Windows Management Instrumentation/T1047”
- T1059Command and Scripting Interpreter
“Execution - Command and Scripting Interpreter/T1059.001, T1059.003; Windows Management Instrumentation/T1047”
What the reports say
1 report, newest first · the exact sentence from each-
Investigating New INC Ransom Group Activity“#Cybersecurity #Databreach #Dataleak #infosec #cyberattack… pic.twitter.com/4fPIPyZtid”
Indicators in its reports
named in the reports above- accd8bc0d0c2675c…37afc57c289cin 1 report
Copy this indicator · defanged
Thanks — we review every report.