Excerpt
What distinguishes Drifter is how it hides. Its C2 domains are named after IP camera brands ( cctv[.]su , nvms9000[.]su ), chosen to blend with the traffic of devices that…
The opening of the report, shown for reference. The full report, with its figures and indicators, is published by GitHub on github.com.
Mentioned in the excerpt
More from GitHub49
- How-to-use-msfvenomGitHub · Added 19 Oct
- GitHub - FallenAstaroth/stink: the cutest python-native infostealerGitHub · Added 18 Oct
- cti/runster/readme.md at main · cert-orangecyberdefense/ctiGitHub · Added 16 Oct
On the same topics
- Silent Push Identifies More Than 10,000 Infected IPs as Part of SystemBC Botnet Malware FamilySilent Push · Published 4 Feb
- The DGA of Sisronbin.re · Added 25 Oct
- JDY Botnet: How IoT and SOHO Devices Are ExploitedLumen Black Lotus Labs · Added 10 Oct
- Who Invited Aisuru to the LAN Party?Bitsight · Published 18 Aug
