Research reports
1,224 reports from 387 publishers45 added in the past week
3 reports, newest added first
Added Tue 15 Sep
Ping32 RMM and ValleyRAT
The VBScript then dropped the legitimate Remote Monitoring and Management (RMM) tool ManageEngine Endpoint Central. Fareed included the IOCs for the following Endpoint Central server IP addresses: 202.61.160.208 202.61.160.202 202.61.160.201 202.61.160.
Malware
Added Tue 25 Aug
CNCMachineRMS C2 Protocol
This post describes the binary command-and-control (C2) protocol used by CNCMachineRMS, a recently identified remote access trojan (RAT). We cover how the protocol was discovered, how its infrastructure was identified, and how network defenders can detect it.…
Malware
Added Wed 29 Jul
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.