Thread by @NandanLohitaksh

Malware Attack Infection Chain
🧵👇🏻

#cybersecurity #infosec #hacking

During the investigation of the campaign, researchers found that the attackers employed the extensive use of both dual-use and living-off-the-land tools. Also, some of the indications say that APT hackers initially attacked and exploited the publicly facing systems and further

moved to the victim’s networks.

There are several publicly available tools of the following have been used in this attack:-

• AdFind – A publicly available tool that is used to query Active Directory.
• Winmail – Can open winmail.dat files.

• WinRAR – An archive manager that can be used to archive or zip files – for example, prior to exfiltration.
• Ping – A tool that is freely available online that can allow users to determine if a specific location on a network is responding.

• Tracert – A network tool that can be used to determine the “path” packets take from one IP address to another.
• Route – A path for sending packets through the internet network to an address on another network.
• NBTscan – Open-source command-line NetBIOS scanner.

• Certutil – Microsoft Windows utility that can be used for various malicious purposes, such as to decode information, to download files, and to install browser root certificates.

• Port Scanner – This allows an attacker to determine what ports are open on a network and could potentially be used to send and receive data.

#cybersecurity #infosec #hacking

Join here to get more stuffs and resources on Tech & Cybersecurity 👇🏻
telegram.me/h4ckerinthehou…