Skip to content
Sign in
Research reports

sans.org · Published 5 Oct

Cracked Brute Ratel C4 framework proliferates across the cybercriminal underground

By Will Thomas

Read the original on sans.org (new tab)

Excerpt

Since mid-September, English-speaking and Russian-speaking cybercriminal underground forums having been buzzing with activity following the leaking and cracking of the Brute Ratel C4 (BRC4) post-exploitation toolkit. This significant event is exemplary of the type of underground forum activity that the SANS FOR589: Cybercrime Intelligence course will cover, and this blog highlights key aspects of how FOR589 will teach students to generate actionable intelligence via monitoring the cybercriminal underground. This includes:

How to identify what is actionable and what is noise within the cybercriminal underground

How to spot sign…

The opening of the report, shown for reference. The full report, with its figures and indicators, is published by sans.org on sans.org.

Report pages show the excerpt, publisher and topics, then link out. CyberSIXT does not republish report bodies.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in