616 - APT29 usa os mesmos exploits que spyware comercial
[Referências do Episódio]
Threat Actors Target the Middle East Using Fake Palo Alto GlobalProtect Tool - https://www.trendmicro.com/en_us/research/24/h/threat-actors-target-middle-east-using-fake-tool.html
Silent Intrusions: Godzilla Fileless Backdoors Targeting Atlassian Confluence - https://www.trendmicro.com/en_us/research/24/h/godzilla-fileless-backdoors.html
The Malware That Must Not Be Named: Suspected Espionage Campaign Delivers “Voldemort” - https://www.proofpoint.com/us/blog/threat-insight/malware-must-not-be-named-suspected-espionage-campaign-delivers-voldemort
From Cobalt Strike to…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.