630 - Earth Baxia, Raptor Train, SambaSpy e nova vuln no Gitlab
[Referências do Episódio]
Earth Baxia Uses Spear-Phishing and GeoServer Exploit to Target APAC - https://www.trendmicro.com/en_us/research/24/i/earth-baxia-spear-phishing-and-geoserver-exploit.html
GrimResource - Microsoft Management Console for initial access and evasion - https://www.elastic.co/security-labs/grimresource
Hijack Execution Flow: AppDomainManager - https://attack.mitre.org/techniques/T1574/014/
Derailing the Raptor Train - https://blog.lumen.com/derailing-the-raptor-train/
Exotic SambaSpy is now dancing with Italian users -…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.