618 - GlobalProtect falso é mais uma vez usado em ataques

Cyber Morning Call · Sep 3, 2024 · 4m

[Referências do Episódio]

Spoofed GlobalProtect Used to Deliver Unique WikiLoader Variant - https://unit42.paloaltonetworks.com/global-protect-vpn-spoof-distributes-wikiloader/

Head Mare: adventures of a unicorn in Russia and Belarus - https://securelist.com/head-mare-hacktivists/113555/

DarkCracks, 一个利用被黑GLPI, WORDPRESS站点充当中转的高级恶意载荷&升级框架 - https://blog.xlab.qianxin.com/uncovering_darkcracks_payload_delivery_framework_cn/#%E6%94%BB%E5%87%BB%E7%9B%AE%E6%A0%87

Iran’s Hacker Hierarchy Exposed - https://www.recordedfuture.com/blog/iran-hacker-hierarchy

Iranian State-Sponsored Hackers Have Become…