The five-day job: A BlackByte ransomware intrusion case study

🗓️ 06 Jul 2023 17:00:00Reported by Microsoft Incident ResponseType

Microsoft investigation of a BlackByte ransomware attack chain, including the use of ProxyShell vulnerabilities to gain initial access and privilege escalation, deployment of living-off-the-land tools, and the impact of the attack on victim organization's operations.

Reporter	Title	Published	Views	Family All 179
githubexploit	Exploit for Server-Side Request Forgery in Microsoft	22 Nov 202107:47	–	githubexploit
githubexploit	Exploit for Out-of-bounds Write in Msi Afterburner	1 Sep 202321:35	–	githubexploit
githubexploit	Exploit for Server-Side Request Forgery in Microsoft	16 Aug 202111:27	–	githubexploit
githubexploit	Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft	4 Sep 202115:34	–	githubexploit
githubexploit	Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft	16 Mar 202600:22	–	githubexploit
githubexploit	Exploit for Server-Side Request Forgery in Microsoft	16 Aug 202111:27	–	githubexploit
githubexploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	31 Jan 202320:29	–	githubexploit
githubexploit	Exploit for Out-of-bounds Write in Msi Afterburner	21 Jan 202607:51	–	githubexploit
githubexploit	Exploit for Server-Side Request Forgery in Microsoft	10 Aug 202115:01	–	githubexploit
githubexploit	Exploit for Server-Side Request Forgery in Microsoft	29 Jun 202212:37	–	githubexploit

06 Jul 2023 17:00Current

8.1High risk

Vulners AI Score8.1

EPSS0.99999